@timo972/cc-router 0.7.0

package/CHANGELOG.md

@@ -0,0 +1,96 @@
+# Changelog
+
+All notable changes to this project are documented here.
+
+This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+---
+
+## [0.7.0] — 2026-07-26
+
+First release of `@timo972/cc-router`, an independently maintained fork of
+[VictorMinemu/CC-Router](https://github.com/VictorMinemu/CC-Router). Adds
+cache-aware session routing and a round of security hardening.
+
+### ⚠️ Breaking
+
+- **The package moved to `@timo972/cc-router`.** The old package name is no
+  longer used by this project. Reinstall rather than upgrade in place:
+
+  ```bash
+  npm uninstall -g ai-cc-router
+  npm install -g @timo972/cc-router
+  ```
+
+  Update checks and the CLI's install hints now resolve against the new name.
+  Existing `~/.cc-router` configuration and accounts are unaffected.
+
+- **Auto-update is off by default.** New releases are announced but not
+  installed. Opt back in with `autoUpdate: true` in `~/.cc-router/config.json`
+  or `CC_ROUTER_AUTO_UPDATE=1`.
+
+- **Server mode now requires a proxy secret.** The "skip — no password" option
+  is gone, and the router refuses to bind a non-loopback interface without a
+  secret. Loopback-only setups are unchanged.
+
+- **Telemetry is opt-in.** Nothing is sent unless you run
+  `cc-router telemetry on`.
+
+### Added
+
+- **Cache-aware session routing.** Requests from one Claude Code session stay on
+  one account, preserving prompt-cache locality instead of scattering a
+  conversation's shared prefix across per-account caches. New sessions are
+  placed by fewest in-flight requests, then fewest bound sessions, then most
+  rate-limit headroom, with a rotating round-robin tie-break.
+- **Load-aware account leases** with ownership-checked acquisition and release,
+  so concurrent streams cannot corrupt each other's account state.
+- **Passive stream lifecycle diagnostics** on `cc-router status --json` and
+  `/cc-router/health`, for diagnosing stalled streams without buffering or
+  altering response bytes.
+- **[docs/session-routing.md](docs/session-routing.md)** — operational guide for
+  running the router across a team.
+
+### Changed
+
+- Streaming stays byte-transparent: no synthetic `message_stop`, and no retry
+  once response bytes have started. `proxyRequestTimeoutMs` now covers only the
+  pre-header phase and is disarmed once a response begins, so long thinking
+  pauses are no longer cut off.
+- `cc-router configure` manages Claude Code's event- and byte-level stream idle
+  watchdogs at 30 minutes. Restart running Claude Code processes to pick them up.
+- Unauthenticated `/cc-router/health` returns only `{status}`; the account
+  inventory and recent logs require the proxy secret.
+- `~/.cc-router` is created `0700`; `accounts.json` and `config.json` are written
+  `0600`, so other local users can no longer read OAuth tokens or the secret.
+
+### Fixed
+
+- Concurrent SSE streams are routed per Claude session rather than sharing state.
+- Token refresh serializes account ownership and joins an in-flight refresh
+  during request preparation, instead of racing a second refresh.
+- Refresh ownership is reserved across account deletion.
+- Claude config mutations are guarded and schema-validated, and watchdog backups
+  survive the config lifecycle.
+- Idle session counts expire on read rather than accumulating.
+- SSE lifecycle line retention is bounded.
+- Deflaked the started-stream timeout assertion, which allowed only 50 ms for the
+  upstream response and failed under parallel CI load.
+
+### Security
+
+- Strict semver validation on registry responses before the version reaches a
+  child process, and `shell:true` dropped from the update spawn — closes a
+  Windows command-injection path.
+- Release pipeline publishes with `--provenance` under least-privilege
+  permissions, with actions pinned by commit SHA.
+- mitmproxy root CA can now be removed at teardown (`cc-router client disconnect`)
+  instead of leaving a trusted root installed permanently.
+- Docker runs as non-root with digest-pinned images, `cap_drop: ALL`,
+  `no-new-privileges`, loopback-bound ports, and a required `LITELLM_MASTER_KEY`.
+  `--detailed_debug` was dropped — it logged the injected OAuth bearer.
+- `docs/security.md` corrected on telemetry, file permissions, and TLS.
+- `http-proxy-middleware` 3.0.5 → 3.0.7 for GHSA-gcq2-9pq2-cxqm (high). The
+  affected APIs are not used here.
+
+[0.7.0]: https://github.com/Timo972/cc-router/releases/tag/v0.7.0

package/Dockerfile

@@ -0,0 +1,42 @@
+# ── Build stage ───────────────────────────────────────────────────────────────
+# Pinned by digest (immutable) — a moving tag could ship unexpected/compromised
+# content. Update deliberately: `crane digest node:22-alpine`.
+FROM node:22-alpine@sha256:16e22a550f3863206a3f701448c45f7912c6896a62de43add43bb9c86130c3e2 AS builder
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci
+
+COPY tsconfig.json ./
+COPY src/ ./src/
+RUN npm run build
+
+# ── Runtime stage ─────────────────────────────────────────────────────────────
+FROM node:22-alpine@sha256:16e22a550f3863206a3f701448c45f7912c6896a62de43add43bb9c86130c3e2 AS runtime
+WORKDIR /app
+
+ENV NODE_ENV=production
+# Port defaults — overridden by docker-compose environment section
+ENV PORT=3456
+ENV ACCOUNTS_PATH=/app/accounts.json
+
+# Install only production deps
+COPY package*.json ./
+RUN npm ci --omit=dev && npm cache clean --force
+
+COPY --from=builder /app/dist ./dist
+
+# Drop root: the node:alpine base already ships an unprivileged `node` user (uid
+# 1000). Any RCE in the process is then non-root with no write access outside
+# the app dir. NOTE (Linux hosts): the mounted accounts.json must be
+# readable/writable by uid 1000, or set `user:` in docker-compose to match the
+# host owner — otherwise token-refresh writes will fail.
+RUN chown -R node:node /app
+USER node
+
+EXPOSE 3456
+
+# accounts.json is expected to be mounted at runtime via docker-compose volume
+# The container will exit with a clear error if it's not present
+ENTRYPOINT ["node", "dist/cli/index.js"]
+CMD ["start"]

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CC-Router Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.