@srouterhq/server 0.0.0-stage → 0.9.0

package/dist/lib/url-guard.js

@@ -0,0 +1,229 @@
+import dns from 'node:dns';
+import net from 'node:net';
+const METADATA_HOSTNAMES = new Set([
+    'metadata.google.internal',
+    'metadata.goog',
+]);
+// Exact IPv4 metadata addresses that sit outside the link-local range.
+const METADATA_ADDRESSES = new Set([
+    '100.100.100.200', // Alibaba Cloud IMDS
+    '192.0.0.192', // Oracle Cloud legacy IMDS
+]);
+// AWS IMDSv2 IPv6 (fd00:ec2::254) as its eight expanded hextets, so every
+// spelling (compressed, uncompressed, zero-padded) matches.
+const AWS_IMDS_V6 = [0xfd00, 0x0ec2, 0, 0, 0, 0, 0, 0x0254];
+function classifyIpv4(ip) {
+    const octets = ip.split('.').map(Number);
+    const [a, b] = octets;
+    if (METADATA_ADDRESSES.has(ip))
+        return 'metadata';
+    if (a === 169 && b === 254)
+        return ip === '169.254.169.254' ? 'metadata' : 'link-local';
+    if (a === 127)
+        return 'loopback';
+    if (a === 10)
+        return 'private';
+    if (a === 172 && b >= 16 && b <= 31)
+        return 'private';
+    if (a === 192 && b === 168)
+        return 'private';
+    // CGNAT range; contains Alibaba's metadata address and is never a place a
+    // user-facing LLM endpoint is published.
+    if (a === 100 && b >= 64 && b <= 127)
+        return 'private';
+    if (a === 0)
+        return 'loopback'; // 0.0.0.0 → "this host"
+    return 'public';
+}
+/**
+ * Expand an IPv6 literal into its eight 16-bit hextets. Handles `::`
+ * compression, an embedded dotted-IPv4 tail (::ffff:169.254.169.254), and
+ * zone ids. Returns null for anything that isn't a well-formed address.
+ */
+function expandIpv6(ip) {
+    let s = ip.toLowerCase();
+    const zone = s.indexOf('%');
+    if (zone !== -1)
+        s = s.slice(0, zone);
+    const lastColon = s.lastIndexOf(':');
+    if (s.indexOf('.', lastColon) !== -1) {
+        // Dotted-IPv4 tail → fold into the last two hextets.
+        const octets = s.slice(lastColon + 1).split('.').map(Number);
+        if (octets.length !== 4 || octets.some((o) => !Number.isInteger(o) || o < 0 || o > 255))
+            return null;
+        s = s.slice(0, lastColon + 1)
+            + ((octets[0] << 8) | octets[1]).toString(16) + ':'
+            + ((octets[2] << 8) | octets[3]).toString(16);
+    }
+    const halves = s.split('::');
+    if (halves.length > 2)
+        return null;
+    const head = halves[0] ? halves[0].split(':') : [];
+    const tail = halves.length === 2 && halves[1] ? halves[1].split(':') : [];
+    const fill = 8 - head.length - tail.length;
+    if (halves.length === 2 ? fill < 0 : fill !== 0)
+        return null;
+    const groups = [...head, ...new Array(halves.length === 2 ? fill : 0).fill('0'), ...tail];
+    if (groups.length !== 8 || groups.some((g) => !/^[0-9a-f]{1,4}$/.test(g)))
+        return null;
+    return groups.map((g) => parseInt(g, 16));
+}
+function classifyIpv6(ip) {
+    const hextets = expandIpv6(ip);
+    // net.isIP already vetted the input, so this branch is unreachable in
+    // practice — but an unparseable address must not classify as public.
+    if (!hextets)
+        return 'link-local';
+    const [h0, h1, h2, h3, h4, h5, h6, h7] = hextets;
+    const embedded = `${h6 >> 8}.${h6 & 0xff}.${h7 >> 8}.${h7 & 0xff}`;
+    if (h0 === 0 && h1 === 0 && h2 === 0 && h3 === 0 && h4 === 0) {
+        // ::ffff:0:0/96 (IPv4-mapped) and ::/96 (deprecated IPv4-compatible,
+        // which also covers :: and ::1 → 0.0.0.0 / 0.0.0.1 → loopback). The
+        // WHATWG URL parser canonicalises mapped literals to the HEX form —
+        // http://[::ffff:169.254.169.254]/ parses to hostname ::ffff:a9fe:a9fe —
+        // so classification must go through the expanded hextets; a dotted-form
+        // string match never fires on URL-sourced hostnames.
+        if (h5 === 0xffff || h5 === 0)
+            return classifyIpv4(embedded);
+    }
+    // NAT64 well-known prefix (64:ff9b::/96) — a NAT64 gateway would route
+    // this straight to the embedded IPv4.
+    if (h0 === 0x64 && h1 === 0xff9b && h2 === 0 && h3 === 0 && h4 === 0 && h5 === 0) {
+        return classifyIpv4(embedded);
+    }
+    if (AWS_IMDS_V6.every((h, i) => h === hextets[i]))
+        return 'metadata';
+    if ((h0 & 0xffc0) === 0xfe80)
+        return 'link-local'; // fe80::/10
+    if ((h0 & 0xfe00) === 0xfc00)
+        return 'private'; // fc00::/7 (ULA)
+    return 'public';
+}
+export function classifyIp(ip) {
+    const version = net.isIP(ip);
+    if (version === 4)
+        return classifyIpv4(ip);
+    if (version === 6)
+        return classifyIpv6(ip);
+    return 'public';
+}
+/**
+ * Hostname half of {@link isLoopbackOrPrivateUrl}: true when a bare hostname
+ * names THIS machine or the LAN. Callers that already parsed the URL (the
+ * proxy router, which needs the hostname for NO_PROXY anyway) use this
+ * directly so the URL is parsed once.
+ *
+ * Normalises the two spellings a URL hostname can arrive in: IPv6 literals are
+ * bracketed (`[::1]`), and the FQDN form carries a trailing dot (`localhost.`
+ * — a real, resolvable spelling that must not slip past as a public name).
+ */
+export function isLoopbackOrPrivateHostname(hostname) {
+    const host = hostname.replace(/^\[|\]$/g, '').replace(/\.$/, '').toLowerCase();
+    if (host === 'localhost' || host.endsWith('.localhost'))
+        return true;
+    if (net.isIP(host)) {
+        const cls = classifyIp(host);
+        return cls === 'loopback' || cls === 'private';
+    }
+    return false;
+}
+/**
+ * Synchronous locality check for a stored provider base_url: true when the URL
+ * points at THIS machine or the LAN (loopback, RFC1918/ULA private, 'localhost').
+ * Used by the rate limiter to exempt local inference servers (Ollama/llama.cpp/
+ * LM Studio via the 'custom' platform) from cloud-quota cooldown ladders (#592):
+ * a local box has no quota, so long benches only strand the user's one route.
+ *
+ * Deliberately DNS-free so it can sit on the cooldown hot path: literal IPs and
+ * 'localhost'/'*.localhost' are decidable synchronously; any other hostname
+ * (LAN mDNS names included) is pragmatically treated as NON-local — the worst
+ * case there is the pre-existing conservative bench, never a wrong exemption.
+ */
+export function isLoopbackOrPrivateUrl(rawUrl) {
+    if (!rawUrl)
+        return false;
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        return false;
+    }
+    return isLoopbackOrPrivateHostname(url.hostname);
+}
+async function defaultResolve(hostname) {
+    const records = await dns.promises.lookup(hostname, { all: true, verbatim: true });
+    return records.map(r => r.address);
+}
+function blockPrivateEnabled() {
+    return /^(1|true|yes)$/i.test(process.env.SROUTER_BLOCK_PRIVATE_PROVIDER_URLS ?? '');
+}
+/**
+ * Assess whether an outbound custom-provider URL is safe to contact.
+ * Never throws on malformed input — a bad URL comes back as {allowed: false}.
+ */
+export async function assessProviderUrl(rawUrl, opts = {}) {
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        return { allowed: false, reason: 'not a valid URL' };
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        return { allowed: false, reason: `unsupported protocol ${url.protocol.replace(/:$/, '')}` };
+    }
+    // WHATWG URL canonicalises decimal/hex/octal IPv4 forms (http://2852039166/
+    // parses to hostname 169.254.169.254), so classifying url.hostname covers
+    // those encodings too. IPv6 literals arrive bracketed — strip for net.isIP.
+    const hostname = url.hostname.replace(/^\[|\]$/g, '').toLowerCase();
+    if (METADATA_HOSTNAMES.has(hostname)) {
+        return { allowed: false, reason: 'cloud metadata endpoints are not reachable through custom providers' };
+    }
+    let addresses;
+    if (net.isIP(hostname)) {
+        addresses = [hostname];
+    }
+    else {
+        try {
+            addresses = await (opts.resolve ?? defaultResolve)(hostname);
+        }
+        catch {
+            // Unresolvable now may resolve later (device not on the LAN yet, DNS
+            // hiccup). Saving is harmless — the request-time check runs again.
+            return { allowed: true };
+        }
+        if (addresses.length === 0)
+            return { allowed: true };
+    }
+    const blockPrivate = opts.blockPrivate ?? blockPrivateEnabled();
+    for (const address of addresses) {
+        const cls = classifyIp(address);
+        if (cls === 'metadata') {
+            return { allowed: false, reason: `resolves to a cloud metadata address (${address})` };
+        }
+        if (cls === 'link-local') {
+            return { allowed: false, reason: `resolves to a link-local address (${address})` };
+        }
+        if (blockPrivate && (cls === 'loopback' || cls === 'private')) {
+            return {
+                allowed: false,
+                reason: `resolves to a private address (${address}) and SROUTER_BLOCK_PRIVATE_PROVIDER_URLS is set`,
+            };
+        }
+    }
+    return { allowed: true };
+}
+/**
+ * Request-time enforcement: throws when the URL is blocked. Used by
+ * proxyFetch for the custom platform so a base_url that slipped into the DB
+ * (older install, direct DB edit, DNS change after save) still can't reach a
+ * blocked address class.
+ */
+export async function assertProviderUrlAllowed(rawUrl) {
+    const verdict = await assessProviderUrl(rawUrl);
+    if (!verdict.allowed) {
+        throw new Error(`Custom provider URL blocked: ${verdict.reason}`);
+    }
+}
+//# sourceMappingURL=url-guard.js.map

package/dist/lib/url-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-guard.js","sourceRoot":"","sources":["../../src/lib/url-guard.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,GAAG,MAAM,UAAU,CAAC;AAsC3B,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,0BAA0B;IAC1B,eAAe;CAChB,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,aAAa,EAAE,2BAA2B;CAC3C,CAAC,CAAC;AAEH,0EAA0E;AAC1E,4DAA4D;AAC5D,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAE5D,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;IACtB,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;IACxF,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC7C,0EAA0E;IAC1E,yCAAyC;IACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,wBAAwB;IACxD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,EAAU;IAC5B,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACrC,qDAAqD;QACrD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACrG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC;cACzB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,GAAG;cACjD,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,sEAAsE;IACtE,qEAAqE;IACrE,IAAI,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC;IAClC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IACnE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7D,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,yEAAyE;QACzE,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/D,CAAC;IACD,uEAAuE;IACvE,sCAAsC;IACtC,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACjF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IACrE,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC,CAAC,YAAY;IAC/D,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,CAAC,iBAAiB;IACjE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CAAC,QAAgB;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/E,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,SAAS,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAiC;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,2BAA2B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAcD,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAsB,EAAE;IAC9E,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEpE,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qEAAqE,EAAE,CAAC;IAC3G,CAAC;IAED,IAAI,SAAmB,CAAC;IACxB,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,mEAAmE;YACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,OAAO,GAAG,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,OAAO,GAAG,EAAE,CAAC;QACrF,CAAC;QACD,IAAI,YAAY,IAAI,CAAC,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;YAC9D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kCAAkC,OAAO,kDAAkD;aACpG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc;IAC3D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC"}

package/dist/lib/wake-detect.d.ts

@@ -0,0 +1,12 @@
+export interface WakeHooks {
+    onWake: (event: WakeEvent) => void | Promise<void>;
+}
+export interface WakeEvent {
+    reason: 'drift' | 'signal';
+    idleMs: number;
+    signal?: string;
+}
+export declare function startWakeDetect(h: WakeHooks): void;
+export declare function stopWakeDetect(): void;
+export declare function _resetForTests(): void;
+//# sourceMappingURL=wake-detect.d.ts.map

package/dist/lib/wake-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-detect.d.ts","sourceRoot":"","sources":["../../src/lib/wake-detect.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAwDD,wBAAgB,eAAe,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CASlD;AAED,wBAAgB,cAAc,IAAI,IAAI,CAYrC;AAED,wBAAgB,cAAc,IAAI,IAAI,CAErC"}

package/dist/lib/wake-detect.js

@@ -0,0 +1,99 @@
+// Detect that the host slept (laptop lid closed, VM paused) and give the
+// server a chance to shake off stale state the moment it comes back. While
+// the process is suspended nothing runs — timers, health probes, keep-alive
+// sockets all freeze — so the first requests after wake used to hit dead
+// upstream sockets and pre-sleep key statuses until the 5-minute health cycle
+// caught up. Detection is a 5s heartbeat: when the wall clock jumped far
+// beyond the expected tick interval (>30s drift), the process was suspended.
+// SIGCONT/SIGUSR2 also trigger a wake event, so operators (and the desktop
+// wrapper) can force a recovery pass by signaling the process. SIGUSR1 is
+// deliberately NOT used: Node reserves it for the inspector — signaling it
+// opens a debugger port, which is the opposite of hardening.
+//
+// Ported from @Naster17's fork (Naster17/srouter-pro@4c43cf2a), trimmed to
+// what applies upstream: his inflight-slot TTL guards fork-only concurrency
+// machinery, and his SQLite ping/reconnect isn't needed for an in-process
+// better-sqlite3 handle (and would bypass connectDb's injected factory).
+const TICK_MS = 5_000;
+const DRIFT_THRESHOLD_MS = 30_000;
+// One recovery pass per resume: a drift tick and an operator SIGCONT/SIGUSR2
+// for the SAME wake (or signal spam) must not stack flushes + full key
+// re-probes on top of each other.
+const WAKE_DEBOUNCE_MS = 15_000;
+let hooks = null;
+let timer = null;
+let lastTickAt = 0;
+let lastWakeAt = 0;
+let installed = false;
+// Kept so stopWakeDetect can remove exactly the listeners this module added —
+// removeAllListeners would silently unhook any OTHER module's SIGUSR2 handler
+// (log rotation, heap-dump triggers).
+const sigcontHandler = () => handleSignal('SIGCONT');
+const sigusr2Handler = () => handleSignal('SIGUSR2');
+function tick() {
+    const now = Date.now();
+    if (lastTickAt > 0) {
+        const drift = now - lastTickAt - TICK_MS;
+        if (drift > DRIFT_THRESHOLD_MS) {
+            invokeHooks({ reason: 'drift', idleMs: drift });
+        }
+    }
+    lastTickAt = now;
+    timer = setTimeout(tick, TICK_MS);
+    // Never keep the process alive just for the heartbeat.
+    if (timer.unref)
+        timer.unref();
+}
+function handleSignal(name) {
+    const idleMs = lastTickAt > 0 ? Math.max(0, Date.now() - lastTickAt - TICK_MS) : 0;
+    invokeHooks({ reason: 'signal', idleMs, signal: name });
+    lastTickAt = Date.now();
+}
+// The recovery pass must never take the server down: a throwing handler is
+// logged and swallowed, sync or async.
+function invokeHooks(event) {
+    if (!hooks)
+        return;
+    const now = Date.now();
+    if (now - lastWakeAt < WAKE_DEBOUNCE_MS)
+        return;
+    lastWakeAt = now;
+    try {
+        Promise.resolve(hooks.onWake(event)).catch((err) => {
+            console.error(`[wake-detect] onWake handler error: ${err?.message ?? err}`);
+        });
+    }
+    catch (err) {
+        console.error(`[wake-detect] onWake handler threw synchronously: ${err?.message ?? err}`);
+    }
+}
+export function startWakeDetect(h) {
+    if (installed)
+        return; // idempotent — no double signal registration
+    installed = true;
+    hooks = h;
+    lastTickAt = Date.now();
+    timer = setTimeout(tick, TICK_MS);
+    if (timer.unref)
+        timer.unref();
+    process.on('SIGCONT', sigcontHandler);
+    process.on('SIGUSR2', sigusr2Handler);
+}
+export function stopWakeDetect() {
+    if (!installed)
+        return;
+    installed = false;
+    if (timer) {
+        clearTimeout(timer);
+        timer = null;
+    }
+    process.removeListener('SIGCONT', sigcontHandler);
+    process.removeListener('SIGUSR2', sigusr2Handler);
+    hooks = null;
+    lastTickAt = 0;
+    lastWakeAt = 0;
+}
+export function _resetForTests() {
+    stopWakeDetect();
+}
+//# sourceMappingURL=wake-detect.js.map

package/dist/lib/wake-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-detect.js","sourceRoot":"","sources":["../../src/lib/wake-detect.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,6DAA6D;AAC7D,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,yEAAyE;AAYzE,MAAM,OAAO,GAAG,KAAK,CAAC;AACtB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,6EAA6E;AAC7E,uEAAuE;AACvE,kCAAkC;AAClC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,IAAI,KAAK,GAAqB,IAAI,CAAC;AACnC,IAAI,KAAK,GAA0B,IAAI,CAAC;AACxC,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,8EAA8E;AAC9E,8EAA8E;AAC9E,sCAAsC;AACtC,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AACrD,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AAErD,SAAS,IAAI;IACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,GAAG,GAAG,UAAU,GAAG,OAAO,CAAC;QACzC,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,UAAU,GAAG,GAAG,CAAC;IACjB,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,uDAAuD;IACvD,IAAI,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,2EAA2E;AAC3E,uCAAuC;AACvC,SAAS,WAAW,CAAC,KAAgB;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,UAAU,GAAG,gBAAgB;QAAE,OAAO;IAChD,UAAU,GAAG,GAAG,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,OAAO,CAAC,KAAK,CAAC,uCAAuC,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,qDAAqD,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAY;IAC1C,IAAI,SAAS;QAAE,OAAO,CAAC,6CAA6C;IACpE,SAAS,GAAG,IAAI,CAAC;IACjB,KAAK,GAAG,CAAC,CAAC;IACV,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxB,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,SAAS,GAAG,KAAK,CAAC;IAClB,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAClD,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAClD,KAAK,GAAG,IAAI,CAAC;IACb,UAAU,GAAG,CAAC,CAAC;IACf,UAAU,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,cAAc,EAAE,CAAC;AACnB,CAAC"}

package/dist/middleware/errorHandler.d.ts

@@ -0,0 +1,3 @@
+import type { Request, Response, NextFunction } from 'express';
+export declare function errorHandler(err: Error, req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=errorHandler.d.ts.map

package/dist/middleware/errorHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.d.ts","sourceRoot":"","sources":["../../src/middleware/errorHandler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAQ/D,wBAAgB,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,QAyCvF"}

package/dist/middleware/errorHandler.js

@@ -0,0 +1,45 @@
+import { logRequest } from '../lib/request-log.js';
+// The inference wire surfaces whose over-limit bodies deserve an analytics
+// row — the dashboard renders them like any failed request instead of the
+// rejection being visible only in the container log.
+const INFERENCE_PATH_PREFIXES = ['/v1', '/v1beta', '/mcp'];
+export function errorHandler(err, req, res, next) {
+    const isProduction = (process.env.NODE_ENV ?? 'development') === 'production';
+    console.error('[Error]', isProduction ? err : err.message);
+    if (res.headersSent)
+        return next(err);
+    const status = err.status ?? 500;
+    // body-parser rejects bodies over the configured limit with its own error
+    // shape ('PayloadTooLargeError', type 'entity.too.large'). Agents reading
+    // the OpenAI error contract saw an opaque 413; normalize it, and record the
+    // rejection in request analytics so it shows up in the dashboard like the
+    // upstream-413 path that the fallback loop already logs.
+    if (err.type === 'entity.too.large' || status === 413) {
+        const limit = err.limit;
+        const received = err.length ?? err.expected;
+        const message = `Request body too large${typeof received === 'number' ? ` (${received} bytes)` : ''}` +
+            `${typeof limit === 'number' ? ` for the ${limit}-byte limit` : ''}. ` +
+            'Vision requests embed base64 images in the body; raise REQUEST_BODY_LIMIT_MB (default 25) to accept larger payloads.';
+        if (INFERENCE_PATH_PREFIXES.some(prefix => req.path.startsWith(prefix))) {
+            logRequest('proxy', 'payload-too-large', null, 'error', 0, 0, 0, message);
+        }
+        res.status(413).json({
+            error: {
+                message,
+                type: 'invalid_request_error',
+                code: 'request_too_large',
+            },
+        });
+        return;
+    }
+    const message = isProduction && status >= 500
+        ? 'Internal server error'
+        : err.message;
+    res.status(status).json({
+        error: {
+            message,
+            type: err.name ?? 'server_error',
+        },
+    });
+}
+//# sourceMappingURL=errorHandler.js.map

package/dist/middleware/errorHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/middleware/errorHandler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,2EAA2E;AAC3E,0EAA0E;AAC1E,qDAAqD;AACrD,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAE3D,MAAM,UAAU,YAAY,CAAC,GAAU,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB;IACtF,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC,KAAK,YAAY,CAAC;IAC9E,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAE3D,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAI,GAAW,CAAC,MAAM,IAAI,GAAG,CAAC;IAE1C,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,IAAK,GAAW,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAI,GAAW,CAAC,KAAK,CAAC;QACjC,MAAM,QAAQ,GAAI,GAAW,CAAC,MAAM,IAAK,GAAW,CAAC,QAAQ,CAAC;QAC9D,MAAM,OAAO,GAAG,yBAAyB,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;YACnG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI;YACtE,sHAAsH,CAAC;QACzH,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACxE,UAAU,CAAC,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE;gBACL,OAAO;gBACP,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,mBAAmB;aAC1B;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,IAAI,MAAM,IAAI,GAAG;QAC3C,CAAC,CAAC,uBAAuB;QACzB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAChB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QACtB,KAAK,EAAE;YACL,OAAO;YACP,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,cAAc;SACjC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/rateLimit.d.ts

@@ -0,0 +1,4 @@
+import type { Request, Response, NextFunction } from 'express';
+export declare function createProxyRateLimiter(rpmLimit?: number): (req: Request, res: Response, next: NextFunction) => void;
+export declare function createAdminRateLimiter(rpm?: number): (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=rateLimit.d.ts.map

package/dist/middleware/rateLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.d.ts","sourceRoot":"","sources":["../../src/middleware/rateLimit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiC/D,wBAAgB,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,IAIvB,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CAwCtF;AAuBD,wBAAgB,sBAAsB,CAAC,GAAG,CAAC,EAAE,MAAM,IAIlB,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CAwCtF"}

package/dist/middleware/rateLimit.js

@@ -0,0 +1,125 @@
+// Per-IP fixed-window rate limiter for the public /v1 proxy (#35, item #6).
+//
+// The /v1 surface authenticates with the unified API key but has no password
+// login like the dashboard does, so without this an attacker who can reach the
+// server could brute-force the key or flood upstream providers. This caps how
+// many requests a single client IP can make per minute and returns a standard
+// OpenAI-shaped 429 once the cap is exceeded.
+//
+// srouter is a single-user tool, so the default ceiling is generous. Tune it
+// with PROXY_RATE_LIMIT_RPM (requests per minute per IP); set it to 0 to turn
+// rate limiting off entirely.
+const WINDOW_MS = 60_000;
+const DEFAULT_RPM = 120;
+// Bound the IP map so a flood of distinct (e.g. spoofed) source addresses can't
+// grow it without limit; expired entries are pruned opportunistically.
+const MAX_TRACKED_IPS = 10_000;
+function parseLimit() {
+    const raw = process.env.PROXY_RATE_LIMIT_RPM;
+    if (raw === undefined || raw.trim() === '')
+        return DEFAULT_RPM;
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n < 0)
+        return DEFAULT_RPM;
+    return Math.floor(n);
+}
+export function createProxyRateLimiter(rpmLimit) {
+    const limit = rpmLimit !== undefined ? Math.floor(Math.max(0, rpmLimit)) : parseLimit();
+    const windows = new Map();
+    return function proxyRateLimit(req, res, next) {
+        if (limit === 0) {
+            next();
+            return;
+        }
+        const now = Date.now();
+        const ip = req.ip ?? req.socket.remoteAddress ?? 'unknown';
+        let state = windows.get(ip);
+        if (!state || now >= state.resetAt) {
+            state = { count: 0, resetAt: now + WINDOW_MS };
+            windows.set(ip, state);
+        }
+        state.count += 1;
+        if (windows.size > MAX_TRACKED_IPS) {
+            for (const [key, value] of windows) {
+                if (now >= value.resetAt)
+                    windows.delete(key);
+            }
+        }
+        res.setHeader('X-RateLimit-Limit', String(limit));
+        res.setHeader('X-RateLimit-Remaining', String(Math.max(0, limit - state.count)));
+        res.setHeader('X-RateLimit-Reset', String(Math.ceil(state.resetAt / 1000)));
+        if (state.count > limit) {
+            const retryAfter = Math.max(1, Math.ceil((state.resetAt - now) / 1000));
+            res.setHeader('Retry-After', String(retryAfter));
+            res.status(429).json({
+                error: {
+                    message: `Rate limit exceeded: more than ${limit} requests per minute. Retry in ${retryAfter}s.`,
+                    type: 'rate_limit_error',
+                },
+            });
+            return;
+        }
+        next();
+    };
+}
+// Per-IP fixed-window rate limiter for the /api/* admin surface.
+//
+// This is a flood guard, not the brute-force guard: dashboard login already has
+// its own per-email lockout (routes/auth.ts), and the one admin endpoint that
+// verifies a password — GET /api/keys/export — gets its own much tighter
+// limiter mounted in app.ts. The broad cap therefore has to clear normal
+// dashboard traffic with room to spare. Opening the dashboard fans out across
+// keys, health, models, analytics, settings and profiles, and several of those
+// poll, so a single user legitimately spends dozens of requests a minute.
+//
+// Tune with ADMIN_RATE_LIMIT_RPM (requests per minute per IP); 0 disables it.
+const ADMIN_DEFAULT_RPM = 600;
+function parseAdminLimit() {
+    const raw = process.env.ADMIN_RATE_LIMIT_RPM;
+    if (raw === undefined || raw.trim() === '')
+        return ADMIN_DEFAULT_RPM;
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n < 0)
+        return ADMIN_DEFAULT_RPM;
+    return Math.floor(n);
+}
+export function createAdminRateLimiter(rpm) {
+    const limit = rpm !== undefined ? Math.floor(Math.max(0, rpm)) : parseAdminLimit();
+    const windows = new Map();
+    return function adminRateLimit(req, res, next) {
+        if (limit === 0) {
+            next();
+            return;
+        }
+        const now = Date.now();
+        const ip = req.ip ?? req.socket.remoteAddress ?? 'unknown';
+        let state = windows.get(ip);
+        if (!state || now >= state.resetAt) {
+            state = { count: 0, resetAt: now + WINDOW_MS };
+            windows.set(ip, state);
+        }
+        state.count += 1;
+        if (windows.size > MAX_TRACKED_IPS) {
+            for (const [key, value] of windows) {
+                if (now >= value.resetAt)
+                    windows.delete(key);
+            }
+        }
+        res.setHeader('X-RateLimit-Limit', String(limit));
+        res.setHeader('X-RateLimit-Remaining', String(Math.max(0, limit - state.count)));
+        res.setHeader('X-RateLimit-Reset', String(Math.ceil(state.resetAt / 1000)));
+        if (state.count > limit) {
+            const retryAfter = Math.max(1, Math.ceil((state.resetAt - now) / 1000));
+            res.setHeader('Retry-After', String(retryAfter));
+            res.status(429).json({
+                error: {
+                    message: `Rate limit exceeded: more than ${limit} requests per minute. Retry in ${retryAfter}s.`,
+                    type: 'rate_limit_error',
+                },
+            });
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=rateLimit.js.map

package/dist/middleware/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../../src/middleware/rateLimit.ts"],"names":[],"mappings":"AAEA,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8CAA8C;AAC9C,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,8BAA8B;AAE9B,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,gFAAgF;AAChF,uEAAuE;AACvE,MAAM,eAAe,GAAG,MAAM,CAAC;AAO/B,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,WAAW,CAAC;IAC/D,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC;IACrD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACtD,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACxF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE/C,OAAO,SAAS,cAAc,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAC5E,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QAE3D,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,SAAS,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QAEjB,IAAI,OAAO,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACnC,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO;oBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5E,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YACxE,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,OAAO,EAAE,kCAAkC,KAAK,kCAAkC,UAAU,IAAI;oBAChG,IAAI,EAAE,kBAAkB;iBACzB;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,yEAAyE;AACzE,yEAAyE;AACzE,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,EAAE;AACF,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,iBAAiB,CAAC;IACrE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE/C,OAAO,SAAS,cAAc,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAC5E,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QAE3D,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,SAAS,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QAEjB,IAAI,OAAO,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACnC,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO;oBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5E,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YACxE,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,OAAO,EAAE,kCAAkC,KAAK,kCAAkC,UAAU,IAAI;oBAChG,IAAI,EAAE,kBAAkB;iBACzB;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/middleware/requireAuth.d.ts

@@ -0,0 +1,3 @@
+import type { Request, Response, NextFunction } from 'express';
+export declare function requireAuth(req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=requireAuth.d.ts.map

package/dist/middleware/requireAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireAuth.d.ts","sourceRoot":"","sources":["../../src/middleware/requireAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAO/D,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAUjF"}

package/dist/middleware/requireAuth.js

@@ -0,0 +1,17 @@
+import { validateSession } from '../services/auth.js';
+// Gate the /api/* admin surface behind a dashboard session (#35, item #2).
+// The token is the opaque session token issued by /api/auth/login|setup, sent
+// as `Authorization: Bearer <token>`. The /v1 proxy is NOT gated by this — it
+// keeps its own unified-API-key auth for app clients.
+export function requireAuth(req, res, next) {
+    const token = req.headers.authorization?.replace(/^Bearer\s+/i, '')
+        ?? req.headers['x-dashboard-token'];
+    const session = validateSession(token);
+    if (!session) {
+        res.status(401).json({ error: { message: 'Authentication required', type: 'authentication_error' } });
+        return;
+    }
+    req.user = session;
+    next();
+}
+//# sourceMappingURL=requireAuth.js.map

package/dist/middleware/requireAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireAuth.js","sourceRoot":"","sources":["../../src/middleware/requireAuth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,sDAAsD;AACtD,MAAM,UAAU,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACzE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;WAC7D,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAwB,CAAC;IAC9D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IACA,GAA2C,CAAC,IAAI,GAAG,OAAO,CAAC;IAC5D,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/providers/aclide.d.ts

@@ -0,0 +1,18 @@
+import type { ChatCompletionChunk, ChatCompletionResponse, ChatMessage, Platform } from '@srouter/shared/types.js';
+import { BaseProvider, type CompletionOptions, type KeyValidationResult } from './base.js';
+import { type QuotaObservationContext } from '../services/provider-quota.js';
+/** ACLIDE exposes Responses, NOT Chat Completions. Streaming clients receive
+ * buffered compatibility chunks after a terminal response, as with Sail.
+ * No model rows are seeded here: the signed catalog owns the release gate. */
+export declare class AclideProvider extends BaseProvider {
+    readonly platform: Platform;
+    readonly name = "ACLIDE";
+    private headers;
+    private input;
+    private body;
+    private record;
+    validateKey(apiKey: string, quotaContext?: QuotaObservationContext): Promise<KeyValidationResult>;
+    chatCompletion(apiKey: string, messages: ChatMessage[], modelId: string, options?: CompletionOptions, quotaContext?: QuotaObservationContext): Promise<ChatCompletionResponse>;
+    streamChatCompletion(apiKey: string, messages: ChatMessage[], modelId: string, options?: CompletionOptions, quotaContext?: QuotaObservationContext): AsyncGenerator<ChatCompletionChunk>;
+}
+//# sourceMappingURL=aclide.d.ts.map

package/dist/providers/aclide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aclide.d.ts","sourceRoot":"","sources":["../../src/providers/aclide.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,WAAW,EAAgB,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACjI,OAAO,EAAE,YAAY,EAAqB,KAAK,iBAAiB,EAAE,KAAK,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAI9G,OAAO,EAAuC,KAAK,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAyClH;;8EAE8E;AAC9E,qBAAa,cAAe,SAAQ,YAAY;IAC9C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAY;IACvC,QAAQ,CAAC,IAAI,YAAY;IAEzB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,KAAK;IAgCb,OAAO,CAAC,IAAI;IAiBZ,OAAO,CAAC,MAAM;IAIR,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAWjG,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAC3E,OAAO,CAAC,EAAE,iBAAiB,EAAE,YAAY,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAoDhG,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAClF,OAAO,CAAC,EAAE,iBAAiB,EAAE,YAAY,CAAC,EAAE,uBAAuB,GAAG,cAAc,CAAC,mBAAmB,CAAC;CAa5G"}