@skaile/transform-proxy 0.2.6 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.3.0
+
+- omp extension, **behaviour change**: `/anon on` and `/anon off` switch only the omp process they run in (its subagents and its `/new`, `/resume`, `/fork` sessions included) and no longer save the default. Before, every `/anon on|off` wrote `~/.omp/agent/skaile-transform-proxy.json`, so turning anon off in one window turned it off for every omp started later. `/anon on --global` and `/anon off --global` also save the default. A saved `on` is applied at session start only until the first successful `/anon on|off` in that process, so a plain `/anon off` stays off across `/new`. An existing saved `enabled: true` still turns anon on in new omp processes; run `/anon off --global` to clear it.
+
 ## 0.2.6
 
 - omp extension: while anon is on, in error or required, images are not sent. The extension sets omp's `images.blockImages` as a runtime override (never persisted), so omp replaces every image in the request, history included, with `Image reading is disabled.`; `/anon off` drops the override. Before, a screenshot from a browser tool made the proxy refuse every later request of the session with 400 `unsupported_content` ("Anthropic image content cannot be transformed"). `/anon status` lists `images: not sent`. An omp without the settings registry gets one warning, and the proxy keeps refusing images.

package/README.md

@@ -93,7 +93,7 @@ The package ships an [omp](https://omp.sh) extension (subpath `@skaile/transform
 omp plugin install @skaile/transform-proxy
 ```
 
-It adds the command `/anon on|off|status` and a compact status: `🟢A` (on), `🔴A` (off) or `🟠A` (error). The colour is in the emoji because omp strips ANSI colour from extension statuses and draws them in its accent colour. Unless `SKAILE_TRANSFORM_PROXY_URL` names a running proxy, it needs Node ≥ 22 on `PATH` (or its path in `SKAILE_TRANSFORM_PROXY_NODE`).
+It adds the command `/anon on|off [--global] | status` and a compact status: `🟢A` (on), `🔴A` (off) or `🟠A` (error). The colour is in the emoji because omp strips ANSI colour from extension statuses and draws them in its accent colour. Unless `SKAILE_TRANSFORM_PROXY_URL` names a running proxy, it needs Node ≥ 22 on `PATH` (or its path in `SKAILE_TRANSFORM_PROXY_NODE`).
 
 omp shows extension statuses on an extra line below the status line. To show the status in the status line itself, add the `status` segment and turn the extra line off in `~/.omp/agent/config.yml` (`showHookStatus: false` moves every extension status, not just this one, into the segment):
 
@@ -116,7 +116,8 @@ statusLine:
 - The proxy session follows the root omp session: on `/new`, `/resume`, `/fork` (`session_switch`) and on a root `session_start` with a new session id, every provider is re-routed with the new `x-skaile-transform-session`. The proxy keeps the old session's state in memory until it exits; no request carries that id again. A `session_start` of a headless `print` session (how omp runs subagents) keeps the parent's id, so subagents share its pseudonyms.
 - `/anon off` restores the original base URLs and headers.
 - `/anon status` shows the state, the proxy URL and its source, the pipeline, the session id, whether images are blocked, and the routed and refused providers.
-- The enabled flag is saved in `skaile-transform-proxy.json` in omp's agent dir (`~/.omp/agent`; `SKAILE_TRANSFORM_PROXY_OMP_STATE` overrides the path) and re-applied when a session starts.
+- `/anon on` and `/anon off` switch only the omp process they run in: that window, its subagents, and the sessions it opens with `/new`, `/resume` and `/fork`. Other omp windows are not touched, and the saved default does not change.
+- `/anon on --global` and `/anon off --global` also save the default for omp processes started later, in `skaile-transform-proxy.json` in omp's agent dir (`~/.omp/agent`; `SKAILE_TRANSFORM_PROXY_OMP_STATE` overrides the path). A session start applies a saved `on` until the first successful `/anon on|off` in that process; from then on the process follows its own choice. A failed `/anon on --global` saves nothing.
 - `SKAILE_TRANSFORM_PROXY_MODE=required` (set by a skaile session in required mode) turns routing on at session start and refuses `/anon off`.
 
 The overrides are registered under the model-registry source `skaile-transform-proxy`, so `/anon off` clears them in one catalog reload. A provider that another extension registered at runtime is taken over while anon is on; `/anon off` restores its base URL and headers, and a provider that existed only at runtime is reported as lost (restart omp to restore it).

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { d as createTransformProxy, o as resolveProxyConfig, v as errorMessage } from "./config-PKHxejC8.mjs";
+import { d as createTransformProxy, o as resolveProxyConfig, v as errorMessage } from "./config-BZsthgP-.mjs";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { homedir } from "node:os";

package/dist/{config-PKHxejC8.mjs → config-BZsthgP-.mjs}

@@ -323,8 +323,8 @@ async function outbound$2(transform, text, leaf) {
 	return text === "" ? text : transform.outbound(text, leaf);
 }
 /** A string, or an array of blocks whose `text` blocks are rewritten; anything else is refused. */
-async function rewriteText(content, slot, leaf, transform) {
-	if (typeof content === "string") return outbound$2(transform, content, leaf);
+async function rewriteText(content, slot, rewrite) {
+	if (typeof content === "string") return rewrite(content);
 	if (!Array.isArray(content)) return malformed$2(slot);
 	const out = [];
 	for (const block of content) {
@@ -337,11 +337,30 @@ async function rewriteText(content, slot, leaf, transform) {
 		if (typeof block.text !== "string") return malformed$2(`${slot} text block`);
 		out.push({
 			...block,
-			text: await outbound$2(transform, block.text, leaf)
+			text: await rewrite(block.text)
 		});
 	}
 	return out;
 }
+/**
+* Host-written system text that Anthropic's Claude subscription (OAuth) check reads verbatim: the
+* billing header line and the Claude Code identity sentence. Rewritten ("CLI for <NAME_…>",
+* "cc_version=<CONTACT_IP_…>"), the request is answered 429 `rate_limit_error` "Error". Neither
+* carries user data.
+*/
+const BILLING_HEADER = "x-anthropic-billing-header:";
+const CLAUDE_CODE_IDENTITY = "You are Claude Code, Anthropic's official CLI for Claude.";
+/** The leading part of a system text that passes untransformed; `''` when there is none. */
+function gatePrefix(text) {
+	if (text.startsWith(CLAUDE_CODE_IDENTITY)) return CLAUDE_CODE_IDENTITY;
+	if (!text.startsWith(BILLING_HEADER)) return "";
+	const end = text.indexOf("\n");
+	return end === -1 ? text : text.slice(0, end);
+}
+async function rewriteSystemText(text, transform) {
+	const kept = gatePrefix(text);
+	return kept + await outbound$2(transform, text.slice(kept.length), { kind: "system" });
+}
 /** Every string leaf of a JSON value (tool-call input); keys stay as they are. */
 async function rewriteStrings$2(value, leaf, transform) {
 	if (typeof value === "string") return outbound$2(transform, value, leaf);
@@ -421,10 +440,10 @@ async function rewriteContent$2(content, role, toolNames, ctx) {
 				const toolName = typeof block.tool_use_id === "string" ? toolNames.get(block.tool_use_id) : void 0;
 				out.push({
 					...block,
-					content: await rewriteText(block.content, "tool_result content", {
+					content: await rewriteText(block.content, "tool_result content", (text) => outbound$2(ctx.transform, text, {
 						kind: "toolResult",
 						toolName
-					}, ctx.transform)
+					}))
 				});
 				break;
 			}
@@ -567,7 +586,7 @@ const anthropicWalker = {
 	async request(body, ctx) {
 		if (!isObj$2(body)) return malformed$2("request body");
 		const out = { ...body };
-		if (body.system !== void 0) out.system = await rewriteText(body.system, "system", { kind: "system" }, ctx.transform);
+		if (body.system !== void 0) out.system = await rewriteText(body.system, "system", (text) => rewriteSystemText(text, ctx.transform));
 		if (ctx.transform.instruction !== void 0) out.system = withInstruction(out.system, ctx.transform.instruction);
 		if (body.messages !== void 0) {
 			if (!Array.isArray(body.messages)) return malformed$2("messages");

package/dist/index.mjs

@@ -1 +1 @@
-export { t as CONFIG_FILE_NAME, s as PIPELINE_HEADER, c as SESSION_HEADER, l as TOKEN_HEADER, u as UPSTREAM_HEADER, h as UnsupportedContentError, m as anthropicWalker, _ as composeTransforms, n as configCandidates, g as createSessionFacts, d as createTransformProxy, r as findProxyConfig, i as loadProxyConfig, p as openaiChatWalker, f as openaiResponsesWalker, a as parseProxyConfig, o as resolveProxyConfig, y as silentLogger } from "./config-PKHxejC8.mjs";
+export { t as CONFIG_FILE_NAME, s as PIPELINE_HEADER, c as SESSION_HEADER, l as TOKEN_HEADER, u as UPSTREAM_HEADER, h as UnsupportedContentError, m as anthropicWalker, _ as composeTransforms, n as configCandidates, g as createSessionFacts, d as createTransformProxy, r as findProxyConfig, i as loadProxyConfig, p as openaiChatWalker, f as openaiResponsesWalker, a as parseProxyConfig, o as resolveProxyConfig, y as silentLogger } from "./config-BZsthgP-.mjs";

package/dist/omp/index.d.mts

@@ -117,7 +117,8 @@ interface AnonController {
   command(args: string, ctx: OmpContext, session: OmpSessionActions): Promise<void>;
   completions(prefix: string): OmpAutocompleteItem[] | null;
   /**
-   * Applies the persisted flag (or required mode) and refreshes the status bar. A root session
+   * Applies the saved default (unless `/anon on|off` already decided in this process) or required
+   * mode, and refreshes the status bar. A root session
    * whose omp session id changed rotates the proxy session; subagents keep the parent's id.
    */
   sessionStart(ctx: OmpContext, session: OmpSessionActions): Promise<void>;

package/dist/omp/index.mjs

@@ -1,4 +1,4 @@
-import { c as SESSION_HEADER, i as loadProxyConfig, l as TOKEN_HEADER, n as configCandidates, r as findProxyConfig, u as UPSTREAM_HEADER, v as errorMessage } from "../config-PKHxejC8.mjs";
+import { c as SESSION_HEADER, i as loadProxyConfig, l as TOKEN_HEADER, n as configCandidates, r as findProxyConfig, u as UPSTREAM_HEADER, v as errorMessage } from "../config-BZsthgP-.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -14,7 +14,7 @@ const TOKEN_ENV = "SKAILE_TRANSFORM_PROXY_TOKEN";
 const NODE_ENV = "SKAILE_TRANSFORM_PROXY_NODE";
 /** `required` (set by a skaile session in required mode): routing is forced on and `/anon off` is refused. */
 const MODE_ENV = "SKAILE_TRANSFORM_PROXY_MODE";
-/** Overrides the path of the persisted enabled flag. */
+/** Overrides the path of the saved default (`/anon on|off --global`). */
 const STATE_ENV = "SKAILE_TRANSFORM_PROXY_OMP_STATE";
 /** The footer status key. */
 const STATUS_KEY = "anon";
@@ -26,17 +26,29 @@ const SERVED_APIS = {
 	"openai-completions": true,
 	"openai-responses": true
 };
-const USAGE = "usage: /anon on|off|status";
+/** `/anon on --global` / `/anon off --global` also save the default that new omp sessions start with. */
+const GLOBAL_FLAG = "--global";
+const USAGE = "usage: /anon on|off [--global] | status";
 const VERBS = [
 	{
 		value: "on",
 		label: "on",
-		description: "route every provider through the transform proxy"
+		description: "route this session through the transform proxy"
+	},
+	{
+		value: "on --global",
+		label: "on --global",
+		description: "on, and the default for new sessions"
 	},
 	{
 		value: "off",
 		label: "off",
-		description: "restore the original provider base URLs"
+		description: "restore this session's original provider base URLs"
+	},
+	{
+		value: "off --global",
+		label: "off --global",
+		description: "off, and the default for new sessions"
 	},
 	{
 		value: "status",
@@ -44,6 +56,23 @@ const VERBS = [
 		description: "show the proxy, pipeline and routed providers"
 	}
 ];
+/** A parsed `/anon` argument; `undefined` for anything else. */
+function parseCommand(args) {
+	const [verb = "", ...flags] = args.trim().toLowerCase().split(/\s+/);
+	if (verb === "" || verb === "status") return flags.length === 0 ? {
+		verb: "status",
+		global: false
+	} : void 0;
+	if (verb !== "on" && verb !== "off") return void 0;
+	if (flags.length === 0) return {
+		verb,
+		global: false
+	};
+	return flags.length === 1 && flags[0] === GLOBAL_FLAG ? {
+		verb,
+		global: true
+	} : void 0;
+}
 /**
 * The process-wide `/anon` state machine. omp builds one extension instance per session
 * (subagents included) while they share one model registry, so one controller serves them all.
@@ -62,6 +91,8 @@ function createAnonController(deps) {
 	const registries = /* @__PURE__ */ new WeakMap();
 	let wanted = required;
 	let enabled = false;
+	/** The last successful `/anon on|off` in this omp process; once set, the saved default no longer applies here. */
+	let local;
 	/** Whether this controller holds the image block; only then does it release it. */
 	let imagesBlocked = false;
 	/** The host answered that it cannot block images; asked once, warned once. */
@@ -323,7 +354,7 @@ function createAnonController(deps) {
 	*/
 	async function start(ctx, session, root) {
 		enterSession(ctx, root);
-		if (!wanted && readEnabled(statePath)) wanted = true;
+		if (!wanted && local === void 0 && readEnabled(statePath)) wanted = true;
 		if (wanted) {
 			const failure = await activate(ctx, session);
 			if (failure !== void 0) {
@@ -338,15 +369,18 @@ function createAnonController(deps) {
 		required,
 		statePath,
 		async command(args, ctx, session) {
-			switch (args.trim().toLowerCase()) {
+			const parsed = parseCommand(args);
+			const scope = parsed?.global === true ? `this session; default for new sessions: ${parsed.verb}` : "this session";
+			switch (parsed?.verb) {
 				case "on": {
 					const before = wanted;
 					wanted = true;
 					const failure = await activate(ctx, session);
 					if (failure === void 0) {
-						persist(ctx, true);
+						local = true;
+						if (parsed.global) persist(ctx, true);
 						const count = stateOf(ctx.modelRegistry).routed.size;
-						ctx.ui.notify(`anon on: ${count} provider(s) routed through ${endpoint?.url}`, "info");
+						ctx.ui.notify(`anon on (${scope}): ${count} provider(s) routed through ${endpoint?.url}`, "info");
 						break;
 					}
 					wanted = before || required;
@@ -362,13 +396,13 @@ function createAnonController(deps) {
 					const lost = unroute(ctx);
 					wanted = false;
 					enabled = false;
+					local = false;
 					if (!await rebind(ctx, session)) ctx.ui.notify(`anon: could not rebind the active model ${ctx.model?.provider}/${ctx.model?.id}; select it again`, "warning");
-					persist(ctx, false);
-					ctx.ui.notify("anon off: original provider base URLs restored", "info");
+					if (parsed.global) persist(ctx, false);
+					ctx.ui.notify(`anon off (${scope}): original provider base URLs restored`, "info");
 					if (lost.length > 0) ctx.ui.notify(`anon: ${lost.join(", ")} lost their runtime registration (registered by another extension); restart omp to restore them`, "warning");
 					break;
 				}
-				case "":
 				case "status":
 					ctx.ui.notify(statusText(ctx), "info");
 					break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skaile/transform-proxy",
-  "version": "0.2.6",
+  "version": "0.3.1",
   "type": "module",
   "description": "Same-protocol passthrough proxy that runs model requests and replies through a chain of text transforms (Anthropic Messages, OpenAI chat, OpenAI responses)",
   "license": "MIT",