@timo972/cc-router 0.12.1 → 0.12.2-rc.0

package/dist/proxy/token-refresher.js

@@ -1,6 +1,7 @@
 import { writeAnthropicAccountsPreservingOtherProviders, serialize } from "../config/manager.js";
 import { logRefresh } from "./logger.js";
 import { stats } from "./stats.js";
+import { classifyExpectedRuntimeFailure, httpOutcome, recordRuntimeError, recordUpstreamStatus, withTelemetrySpan, } from "../telemetry/facade.js";
 /**
  * Official Claude Code CLI client_id for the OAuth PKCE flow.
  * Source: extracted from Claude Code auth flow.
@@ -68,7 +69,12 @@ export async function refreshAccountToken(account) {
     const existing = rawRefreshLocks.get(account);
     if (existing)
         return existing;
-    const promise = _doRefresh(account);
+    const promise = withTelemetrySpan("oauth.refresh", { provider: "anthropic" }, async (span) => {
+        const refreshed = await _doRefresh(account, span);
+        if (!refreshed)
+            span.fail();
+        return refreshed;
+    });
     rawRefreshLocks.set(account, promise);
     try {
         return await promise;
@@ -155,7 +161,7 @@ export function refreshAccountIfCurrent(account, pool, options = {}) {
     ownedRefreshLocks.set(account, operation);
     return operation;
 }
-async function _doRefresh(account) {
+async function _doRefresh(account, span) {
     try {
         const body = new URLSearchParams({
             grant_type: "refresh_token",
@@ -169,6 +175,8 @@ async function _doRefresh(account) {
         });
         if (!res.ok) {
             const body = await res.text();
+            recordUpstreamStatus("oauth.refresh", "anthropic", res.status);
+            span.fail({ httpStatusCode: res.status, outcome: httpOutcome(res.status) });
             logRefresh(account.id, false);
             console.error(`  Status: ${res.status} — ${body}`);
             account.consecutiveErrors++;
@@ -199,6 +207,8 @@ async function _doRefresh(account) {
         return true;
     }
     catch (err) {
+        recordRuntimeError(err, { operation: "oauth.refresh", provider: "anthropic" });
+        span.fail({ outcome: classifyExpectedRuntimeFailure(err) === "timeout" ? "timeout" : "upstream_error" });
         logRefresh(account.id, false);
         console.error(`  Error:`, err);
         account.consecutiveErrors++;

package/dist/proxy/usage-capture.js

@@ -1,4 +1,5 @@
 import { createBrotliDecompress, createGunzip, createInflate } from "node:zlib";
+import { MAX_RETAINED_SSE_LINE_BYTES } from "./stream-lifecycle.js";
 /** Non-streaming bodies are buffered for one parse at end-of-stream; a body
  *  past this size stops being buffered (usage is best-effort diagnostics —
  *  unbounded buffering of a pathological body is not worth it). */
@@ -31,16 +32,44 @@ export function createAnthropicUsageCapture(options) {
             return;
         dead = true;
         decoder?.destroy();
+        options.onSettled?.();
     };
     // ── SSE: incremental line parsing, stop once both events were seen ────────
     let lineBuf = "";
+    let discardingOversizedLine = false;
     let gotInput = false;
     let gotOutput = false;
     const parseSSEChunk = (text) => {
-        lineBuf += text;
-        const lines = lineBuf.split("\n");
+        let rest = text;
+        if (discardingOversizedLine) {
+            const newline = rest.indexOf("\n");
+            if (newline === -1)
+                return; // still inside the oversized line
+            rest = rest.slice(newline + 1);
+            discardingOversizedLine = false;
+        }
+        if (!rest.includes("\n")) {
+            // No line boundary yet: retain a bounded partial line and never re-split
+            // the accumulated tail (an unterminated tail would otherwise cost
+            // quadratic work and unbounded memory).
+            if (lineBuf.length + rest.length > MAX_RETAINED_SSE_LINE_BYTES) {
+                lineBuf = "";
+                discardingOversizedLine = true;
+            }
+            else {
+                lineBuf += rest;
+            }
+            return;
+        }
+        const lines = (lineBuf + rest).split("\n");
         lineBuf = lines.pop() ?? ""; // keep incomplete last line
+        if (lineBuf.length > MAX_RETAINED_SSE_LINE_BYTES) {
+            lineBuf = "";
+            discardingOversizedLine = true;
+        }
         for (const line of lines) {
+            if (dead)
+                return;
             if (!line.startsWith("data: "))
                 continue;
             try {
@@ -53,9 +82,16 @@ export function createAnthropicUsageCapture(options) {
                     options.onOutputUsage(evt.usage);
                     gotOutput = true;
                 }
+                if (evt.type === "message_stop") {
+                    // The terminal event is the last thing of interest on the stream.
+                    options.onMessageStop?.();
+                    die();
+                    return;
+                }
                 // Everything of interest has been seen — stop paying for the rest of
-                // the stream (and free the decompressor's zlib state).
-                if (gotInput && gotOutput)
+                // the stream (and free the decompressor's zlib state), unless the
+                // caller also wants the terminal event.
+                if (gotInput && gotOutput && !options.onMessageStop)
                     die();
             }
             catch { /* partial JSON across chunk boundary — next chunk completes it */ }
@@ -92,6 +128,7 @@ export function createAnthropicUsageCapture(options) {
         if (isJSON)
             parseJSONBody();
         dead = true;
+        options.onSettled?.();
     };
     if (!decoder) {
         return {

package/dist/telemetry/contracts.js

@@ -0,0 +1,129 @@
+// Every value telemetry may export comes from one of the closed enums below.
+// Anything outside them is dropped by privacy.ts rather than sanitized.
+export const RUNTIME_MODES = ["foreground", "daemon", "service"];
+export const PROVIDERS = ["anthropic", "openai", "other"];
+export const ROUTES = ["messages", "responses", "other"];
+export const REQUEST_SOURCES = ["cli", "desktop", "api", "other"];
+export const MODEL_FAMILIES = ["fable", "sonnet", "opus", "haiku", "codex", "other"];
+export const OPERATIONS = [
+    "proxy.request",
+    "provider.inference",
+    "oauth.refresh",
+    "provider.usage_refresh",
+    "model.discovery",
+];
+export const SETUP_METHODS = [
+    "macos_keychain",
+    "claude_credentials_file",
+    "manual_token",
+    "device_oauth",
+];
+export const SETUP_STAGES = [
+    "attempt_start",
+    "credential_source_selection",
+    "credential_read",
+    "credential_parse",
+    "token_validation",
+    "device_code_request",
+    "authorization_polling",
+    "token_exchange",
+    "access_token_parse",
+    "persistence",
+    "success",
+    "cancellation",
+    "failure",
+];
+export const SETUP_REASONS = [
+    "not_found",
+    "permission_denied",
+    "malformed_credentials",
+    "invalid_token",
+    "unauthorized",
+    "forbidden",
+    "rate_limited",
+    "upstream_4xx",
+    "upstream_5xx",
+    "timeout",
+    "network_failure",
+    "unexpected_response_shape",
+    "persistence_failure",
+    "user_cancelled",
+    "other",
+];
+export const OUTCOMES = [
+    "complete",
+    "rate_limited",
+    "timeout",
+    "upstream_error",
+    "cancelled",
+    "other",
+];
+export const STREAM_OUTCOMES = [
+    "complete",
+    "timeout",
+    "upstream_error",
+    "cancelled",
+    "other",
+];
+export const ERROR_KINDS = [
+    "error",
+    "type_error",
+    "range_error",
+    "reference_error",
+    "syntax_error",
+    "uri_error",
+    "eval_error",
+    "aggregate_error",
+    "unexpected_error",
+];
+export const SYSTEM_ERROR_CODES = [
+    "EAI_AGAIN",
+    "ECONNREFUSED",
+    "ECONNRESET",
+    "ENETUNREACH",
+    "ENOTFOUND",
+    "EPIPE",
+    "ETIMEDOUT",
+];
+export const SEVERITIES = ["info", "warn", "error", "fatal"];
+export const HTTP_METHODS = ["GET", "POST"];
+export const SPAN_KINDS = ["internal", "server", "client"];
+export const SPAN_STATUS_CODES = ["unset", "ok", "error"];
+export const OS_FAMILIES = ["macos", "linux", "windows", "other"];
+export const CPU_ARCHITECTURES = ["arm64", "x64", "other"];
+export const DURATION_BUCKETS = [
+    "under_1s",
+    "1s_to_5s",
+    "5s_to_30s",
+    "30s_to_2m",
+    "over_2m",
+];
+// Manual spans only: cc-router is the sole instrumentation scope.
+export const INSTRUMENTATION_SCOPES = ["cc-router"];
+export const LOG_EVENT_CODES = ["account.setup.diagnostic", "runtime.failure"];
+export const ANALYTICS_EVENT_NAMES = [
+    "app.first_start",
+    "account_setup.started",
+    "account_setup.stage_completed",
+    "account_setup.succeeded",
+    "account_setup.cancelled",
+    "account_setup.failed",
+    "proxy.started",
+    "proxy.heartbeat",
+];
+export const MAX_VERSION_LENGTH = 64;
+export const MAX_TIMESTAMP_MS = 8_640_000_000_000_000;
+export const MAX_DURATION_MS = 86_400_000;
+export const MAX_ATTEMPT = 100;
+export const MAX_ACCOUNT_POOL_SIZE = 10_000;
+export const MAX_CONCURRENCY = 10_000;
+export const MAX_TOKEN_COUNT = 1_000_000_000;
+export const MAX_STACK_FRAMES = 20;
+export const MAX_STACK_FRAME_PATH_LENGTH = 256;
+export const POSTHOG_HOST = "https://eu.i.posthog.com";
+export const POSTHOG_INGESTION_HOSTNAME = "eu.i.posthog.com";
+export const POSTHOG_PROJECT_TOKEN = "phc_n7wcYbbfMSkNxRoB8JVd57PYQZf7DNaEGL2kUeUkxwV2";
+export const POSTHOG_REQUEST_TIMEOUT_MS = 2_000;
+export const POSTHOG_FLUSH_INTERVAL_MS = 5_000;
+export const POSTHOG_FLUSH_AT = 20;
+export const POSTHOG_MAX_QUEUE_SIZE = 100;