@vidiemme/copilot-proxy 0.1.0

package/dist/projectDetector.js

@@ -0,0 +1,130 @@
+import { existsSync } from 'node:fs';
+import { dirname, sep } from 'node:path';
+import { readRepositoryIdentity } from './gitRepository.js';
+const MAX_CACHE_ENTRIES = 5_000;
+const MAX_STICKY_ENTRIES = 1_000;
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function normalizeRoot(root) {
+    return root.trim().replace(/[\\/]+$/, '');
+}
+/**
+ * Deduce il progetto di appartenenza di una richiesta dai path assoluti che
+ * questa cita.
+ *
+ * Le richieste di Copilot Chat trasportano il contesto di lavoro: file aperti,
+ * riferimenti espliciti, risultati degli strumenti dell'agente. Tutti nominano
+ * file reali sul disco. Risalendo da quei path fino al marker di progetto piu'
+ * vicino si ottiene l'attribuzione senza chiedere al developer di configurare
+ * nulla per ogni repository, e senza conservare il contenuto della richiesta:
+ * dei path si tiene solo l'identita' del repository.
+ */
+export class ProjectDetector {
+    roots;
+    markers;
+    stickyTtlMs;
+    maxScanBytes;
+    pattern;
+    /** Path candidato -> repository risolto (o `null` se fuori da ogni progetto). */
+    cache = new Map();
+    sticky = new Map();
+    constructor(options) {
+        // I root piu' lunghi vanno provati per primi: con root annidati vince il
+        // piu' specifico.
+        this.roots = options.roots
+            .map(normalizeRoot)
+            .filter((root) => root.length > 0)
+            .sort((a, b) => b.length - a.length);
+        this.markers = options.markers;
+        this.stickyTtlMs = options.stickyTtlMs;
+        this.maxScanBytes = options.maxScanBytes;
+        this.pattern =
+            this.roots.length > 0
+                ? new RegExp(`(?:${this.roots.map(escapeRegExp).join('|')})(?:/[^\\s"'\`,;:*?<>|()\\[\\]{}\\\\]+)+`, 'g')
+                : undefined;
+    }
+    get enabled() {
+        return this.pattern !== undefined;
+    }
+    /**
+     * @param sessionKey chiave della finestra/conversazione, usata per ereditare
+     *   il progetto nelle richieste che non citano file (titoli, domande secche).
+     */
+    detect(body, sessionKey, now = Date.now()) {
+        const repository = this.fromBody(body);
+        if (repository) {
+            this.remember(sessionKey, repository, now);
+            return { repository, source: 'workspace' };
+        }
+        const previous = this.sticky.get(sessionKey);
+        if (previous && previous.expiresAt > now) {
+            return { repository: previous.repository, source: 'session' };
+        }
+        return undefined;
+    }
+    fromBody(body) {
+        if (!this.pattern || body.length === 0)
+            return undefined;
+        const text = body.toString('utf-8', 0, Math.min(body.length, this.maxScanBytes));
+        const candidates = new Set();
+        this.pattern.lastIndex = 0;
+        for (let match = this.pattern.exec(text); match; match = this.pattern.exec(text)) {
+            candidates.add(match[0]);
+        }
+        if (candidates.size === 0)
+            return undefined;
+        // Vince il progetto piu' citato: un riferimento isolato a un file di un
+        // altro repository non deve dirottare l'attribuzione.
+        const scores = new Map();
+        let best;
+        let bestScore = 0;
+        for (const candidate of candidates) {
+            const repository = this.projectFor(candidate);
+            if (!repository)
+                continue;
+            const score = (scores.get(repository.projectId) ?? 0) + 1;
+            scores.set(repository.projectId, score);
+            if (score > bestScore) {
+                best = repository;
+                bestScore = score;
+            }
+        }
+        return best;
+    }
+    /** Risale dal path fino al primo marker di progetto, senza uscire dal root. */
+    projectFor(candidate) {
+        const cached = this.cache.get(candidate);
+        if (cached !== undefined)
+            return cached ?? undefined;
+        const root = this.roots.find((item) => candidate.startsWith(item) && candidate[item.length] === '/');
+        let result;
+        let directory = candidate;
+        while (root && directory.length > root.length) {
+            if (this.markers.some((marker) => existsSync(`${directory}${sep}${marker}`))) {
+                result = readRepositoryIdentity(directory);
+                break;
+            }
+            const parent = dirname(directory);
+            if (parent === directory)
+                break;
+            directory = parent;
+        }
+        if (this.cache.size >= MAX_CACHE_ENTRIES)
+            this.cache.clear();
+        this.cache.set(candidate, result ?? null);
+        return result;
+    }
+    remember(sessionKey, repository, now) {
+        if (this.sticky.size >= MAX_STICKY_ENTRIES) {
+            for (const [key, entry] of this.sticky) {
+                if (entry.expiresAt <= now)
+                    this.sticky.delete(key);
+            }
+            if (this.sticky.size >= MAX_STICKY_ENTRIES)
+                this.sticky.clear();
+        }
+        this.sticky.set(sessionKey, { repository, expiresAt: now + this.stickyTtlMs });
+    }
+}
+//# sourceMappingURL=projectDetector.js.map

package/dist/projectDetector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectDetector.js","sourceRoot":"","sources":["../src/projectDetector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAA2B,MAAM,oBAAoB,CAAC;AAmBrF,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,eAAe;IACT,KAAK,CAAW;IAChB,OAAO,CAAW;IAClB,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,OAAO,CAAqB;IAC7C,iFAAiF;IAChE,KAAK,GAAG,IAAI,GAAG,EAAqC,CAAC;IACrD,MAAM,GAAG,IAAI,GAAG,EAAiE,CAAC;IAEnG,YAAY,OAA+B;QACzC,yEAAyE;QACzE,kBAAkB;QAClB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;aACvB,GAAG,CAAC,aAAa,CAAC;aAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAEzC,IAAI,CAAC,OAAO;YACV,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACnB,CAAC,CAAC,IAAI,MAAM,CACR,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,0CAA0C,EACtF,GAAG,CACJ;gBACH,CAAC,CAAC,SAAS,CAAC;IAClB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAY,EAAE,UAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACzC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEzD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QAErC,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE5C,wEAAwE;QACxE,sDAAsD;QACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,IAAI,IAAoC,CAAC;QACzC,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU;gBAAE,SAAS;YAE1B,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;gBACtB,IAAI,GAAG,UAAU,CAAC;gBAClB,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IACvE,UAAU,CAAC,SAAiB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,IAAI,SAAS,CAAC;QAErD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAC1B,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CACvE,CAAC;QAEF,IAAI,MAAsC,CAAC;QAC3C,IAAI,SAAS,GAAG,SAAS,CAAC;QAC1B,OAAO,IAAI,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM;YACR,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,iBAAiB;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,QAAQ,CAAC,UAAkB,EAAE,UAA8B,EAAE,GAAW;QAC9E,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;oBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,kBAAkB;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC;CACF"}

package/dist/proxy/handler.d.ts

@@ -0,0 +1,5 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import type { ClientConfig } from '../config.js';
+import type { UsageForwarder } from '../collector/forwarder.js';
+import { ProjectDetector } from '../projectDetector.js';
+export declare function createProxyHandler(config: ClientConfig, forwarder: UsageForwarder, detector?: ProjectDetector): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;

package/dist/proxy/handler.js

@@ -0,0 +1,149 @@
+import { randomUUID } from 'node:crypto';
+import { PassThrough, Readable } from 'node:stream';
+import { Agent, request as undiciRequest } from 'undici';
+import { resolveAttribution } from '../attribution.js';
+import { isStreamingResponse, UsageCollector } from '../usage/collector.js';
+import { buildDownstreamHeaders, buildUpstreamHeaders } from './headers.js';
+import { inspectRequest } from './inspectRequest.js';
+/**
+ * Le risposte agentiche possono restare aperte per molti minuti: i timeout di
+ * default di undici (300s) interromperebbero gli stream lunghi.
+ */
+const dispatcher = new Agent({
+    headersTimeout: 0,
+    bodyTimeout: 0,
+    connect: { timeout: 30_000 },
+});
+/**
+ * Header con cui i client identificano la finestra o la conversazione. Servono
+ * a tenere separate sessioni parallele dello stesso developer: senza, due
+ * progetti aperti insieme condividerebbero l'ereditarieta' del progetto.
+ */
+const SESSION_HEADERS = ['vscode-sessionid', 'x-vscode-session-id', 'x-session-id'];
+function sessionKey(headers, bodySessionId, developerId) {
+    for (const name of SESSION_HEADERS) {
+        const value = headers[name];
+        if (typeof value === 'string' && value.length > 0)
+            return `s:${value}`;
+    }
+    return bodySessionId ? `s:${bodySessionId}` : `d:${developerId}`;
+}
+export function createProxyHandler(config, forwarder, detector) {
+    const upstream = new URL(config.upstreamBaseUrl);
+    return async function proxyHandler(request, reply) {
+        const startedAt = Date.now();
+        const rawBody = Buffer.isBuffer(request.body) ? request.body : Buffer.alloc(0);
+        const attribution = resolveAttribution({ path: request.url, headers: request.headers }, config);
+        const [pathname, search = ''] = attribution.upstreamPath.split('?', 2);
+        const facts = inspectRequest(pathname, rawBody);
+        // Se nessun segnale esplicito ha nominato il progetto, lo si deduce dai
+        // path citati nella richiesta: e' cio' che rende superflua la
+        // configurazione per singolo repository.
+        let { projectId, projectSource } = attribution;
+        let repository;
+        if (projectSource === 'fallback' && detector?.enabled) {
+            const detected = detector.detect(rawBody, sessionKey(request.headers, facts.sessionId, attribution.developerId));
+            if (detected) {
+                repository = detected.repository;
+                projectId = detected.repository.projectId;
+                projectSource = detected.source;
+            }
+        }
+        const targetUrl = `${upstream.origin}${upstream.pathname.replace(/\/$/, '')}${pathname}${search ? `?${search}` : ''}`;
+        const headers = buildUpstreamHeaders(request.headers, {
+            projectHeader: config.projectHeader,
+            overrideAuthToken: config.upstreamAuthToken,
+            upstreamHost: upstream.host,
+        });
+        if (facts.body.length > 0)
+            headers.set('content-length', String(facts.body.length));
+        const controller = new AbortController();
+        // L'upstream va interrotto solo se e' il client a sganciarsi prima della
+        // fine: `request.raw` chiude gia' a corpo letto, quindi non e' un segnale
+        // valido di disconnessione.
+        reply.raw.on('close', () => {
+            if (!reply.raw.writableEnded)
+                controller.abort();
+        });
+        let upstreamResponse;
+        try {
+            upstreamResponse = await undiciRequest(targetUrl, {
+                method: request.method,
+                headers: Object.fromEntries(headers.entries()),
+                body: facts.body.length > 0 ? facts.body : undefined,
+                dispatcher,
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            request.log.error({ err: error, targetUrl }, 'richiesta upstream fallita');
+            await reply.code(502).send({ error: 'upstream_unreachable' });
+            return;
+        }
+        const responseHeaders = new Headers();
+        for (const [name, value] of Object.entries(upstreamResponse.headers)) {
+            if (value === undefined)
+                continue;
+            for (const item of Array.isArray(value) ? value : [value])
+                responseHeaders.append(name, item);
+        }
+        const contentType = responseHeaders.get('content-type') ?? undefined;
+        const streaming = isStreamingResponse(contentType);
+        const collector = new UsageCollector(streaming);
+        const requestId = responseHeaders.get('x-request-id') ??
+            request.headers['x-request-id'] ??
+            randomUUID();
+        let recorded = false;
+        const record = () => {
+            if (recorded)
+                return;
+            recorded = true;
+            const parsed = collector.finish();
+            // Nessun contatore: probabilmente non e' una richiesta di inferenza
+            // (es. /models, health check). Non va registrata.
+            if (!parsed)
+                return;
+            forwarder.enqueue({
+                requestId,
+                occurredAt: new Date(startedAt).toISOString(),
+                developerId: attribution.developerId,
+                developerSource: attribution.developerSource,
+                projectId,
+                projectSource,
+                repository: repository ?? null,
+                clientName: attribution.clientName,
+                sessionId: facts.sessionId ?? null,
+                endpoint: pathname,
+                model: parsed.model ?? facts.model ?? null,
+                usage: {
+                    inputTokens: parsed.inputTokens,
+                    cachedInputTokens: parsed.cachedInputTokens,
+                    cacheWriteTokens: parsed.cacheWriteTokens,
+                    outputTokens: parsed.outputTokens,
+                },
+                streamed: streaming,
+                durationMs: Date.now() - startedAt,
+            });
+        };
+        reply.code(upstreamResponse.statusCode);
+        reply.headers(buildDownstreamHeaders(responseHeaders));
+        const source = Readable.from(upstreamResponse.body, { objectMode: false });
+        const passthrough = new PassThrough();
+        source.on('data', (chunk) => {
+            try {
+                collector.push(chunk);
+            }
+            catch (error) {
+                request.log.warn({ err: error }, 'parsing usage fallito');
+            }
+        });
+        // Anche in caso di interruzione i token di input sono stati consumati:
+        // si registra comunque quanto raccolto.
+        source.on('end', record);
+        source.on('error', record);
+        source.on('close', record);
+        source.pipe(passthrough);
+        await reply.send(passthrough);
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/proxy/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../src/proxy/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,QAAQ,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAIvD,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;GAGG;AACH,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC;IAC3B,cAAc,EAAE,CAAC;IACjB,WAAW,EAAE,CAAC;IACd,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;CAC7B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,cAAc,CAAC,CAAC;AAEpF,SAAS,UAAU,CACjB,OAAkC,EAClC,aAAiC,EACjC,WAAmB;IAEnB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,KAAK,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,aAAa,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAoB,EACpB,SAAyB,EACzB,QAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAEjD,OAAO,KAAK,UAAU,YAAY,CAAC,OAAuB,EAAE,KAAmB;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE/E,MAAM,WAAW,GAAG,kBAAkB,CACpC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC/C,MAAM,CACP,CAAC;QAEF,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAsB,CAAC;QAC5F,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEhD,wEAAwE;QACxE,8DAA8D;QAC9D,yCAAyC;QACzC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC;QAC/C,IAAI,UAA0C,CAAC;QAC/C,IAAI,aAAa,KAAK,UAAU,IAAI,QAAQ,EAAE,OAAO,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,OAAO,EACP,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,CACtE,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;gBACjC,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC1C,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;YAClC,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,QAAQ,GACpF,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAC1B,EAAE,CAAC;QAEH,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE;YACpD,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,YAAY,EAAE,QAAQ,CAAC,IAAI;SAC5B,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAEpF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,yEAAyE;QACzE,0EAA0E;QAC1E,4BAA4B;QAC5B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,IAAI,gBAA2D,CAAC;QAChE,IAAI,CAAC;YACH,gBAAgB,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE;gBAChD,MAAM,EAAE,OAAO,CAAC,MAAgB;gBAChC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC9C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACpD,UAAU;gBACV,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,4BAA4B,CAAC,CAAC;YAC3E,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YACrE,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;QACrE,MAAM,SAAS,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;QAEhD,MAAM,SAAS,GACb,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC;YAClC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAwB;YACvD,UAAU,EAAE,CAAC;QAEf,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAEhB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;YAClC,oEAAoE;YACpE,kDAAkD;YAClD,IAAI,CAAC,MAAM;gBAAE,OAAO;YAEpB,SAAS,CAAC,OAAO,CAAC;gBAChB,SAAS;gBACT,UAAU,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC7C,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,eAAe,EAAE,WAAW,CAAC,eAAe;gBAC5C,SAAS;gBACT,aAAa;gBACb,UAAU,EAAE,UAAU,IAAI,IAAI;gBAC9B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI;gBAC1C,KAAK,EAAE;oBACL,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC;gBACD,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;QAEtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,IAAI,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,uEAAuE;QACvE,wCAAwC;QACxC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEzB,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC,CAAC;AACJ,CAAC"}

package/dist/proxy/headers.d.ts

@@ -0,0 +1,6 @@
+export declare function buildUpstreamHeaders(incoming: Record<string, string | string[] | undefined>, options: {
+    projectHeader: string;
+    overrideAuthToken?: string | undefined;
+    upstreamHost: string;
+}): Headers;
+export declare function buildDownstreamHeaders(upstream: Headers): Record<string, string>;

package/dist/proxy/headers.js

@@ -0,0 +1,52 @@
+/** Header hop-by-hop: non vanno mai propagati oltre il proxy. */
+const HOP_BY_HOP = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+/** Header interni al proxy, non devono raggiungere l'upstream. */
+const INTERNAL_HEADERS = new Set(['x-project-id', 'x-developer-id']);
+export function buildUpstreamHeaders(incoming, options) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(incoming)) {
+        const key = name.toLowerCase();
+        if (HOP_BY_HOP.has(key) || INTERNAL_HEADERS.has(key))
+            continue;
+        if (key === options.projectHeader)
+            continue;
+        if (key === 'host' || key === 'content-length')
+            continue;
+        if (value === undefined)
+            continue;
+        for (const item of Array.isArray(value) ? value : [value])
+            headers.append(name, item);
+    }
+    headers.set('host', options.upstreamHost);
+    // Il corpo deve arrivare in chiaro: undici non decomprime automaticamente e
+    // uno stream SSE compresso sarebbe illeggibile sia per il parser di usage sia
+    // per il client, a cui inoltriamo i byte cosi' come li riceviamo.
+    headers.set('accept-encoding', 'identity');
+    if (options.overrideAuthToken) {
+        headers.set('authorization', `Bearer ${options.overrideAuthToken}`);
+    }
+    return headers;
+}
+export function buildDownstreamHeaders(upstream) {
+    const out = {};
+    upstream.forEach((value, name) => {
+        const key = name.toLowerCase();
+        if (HOP_BY_HOP.has(key))
+            return;
+        // La lunghezza viene ricalcolata da Node: il corpo passa in streaming.
+        if (key === 'content-length' || key === 'content-encoding')
+            return;
+        out[name] = value;
+    });
+    return out;
+}
+//# sourceMappingURL=headers.js.map

package/dist/proxy/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../src/proxy/headers.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAErE,MAAM,UAAU,oBAAoB,CAClC,QAAuD,EACvD,OAAgG;IAEhG,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/D,IAAI,GAAG,KAAK,OAAO,CAAC,aAAa;YAAE,SAAS;QAC5C,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,gBAAgB;YAAE,SAAS;QACzD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,8EAA8E;IAC9E,kEAAkE;IAClE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAE3C,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACtD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAChC,uEAAuE;QACvE,IAAI,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,kBAAkB;YAAE,OAAO;QACnE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/proxy/inspectRequest.d.ts

@@ -0,0 +1,18 @@
+interface RequestFacts {
+    model?: string;
+    sessionId?: string;
+    stream: boolean;
+    /** Corpo eventualmente riscritto per abilitare la contabilizzazione. */
+    body: Buffer;
+}
+/**
+ * Ispeziona il corpo della richiesta per ricavare modello e sessione, e
+ * garantisce che l'upstream restituisca i contatori di usage.
+ *
+ * Per gli endpoint in stile OpenAI l'usage in streaming e' opzionale e va
+ * richiesto esplicitamente con `stream_options.include_usage`; senza di esso
+ * la risposta non conterrebbe alcun contatore. Gli endpoint Anthropic lo
+ * includono sempre e il corpo resta invariato.
+ */
+export declare function inspectRequest(path: string, body: Buffer): RequestFacts;
+export {};

package/dist/proxy/inspectRequest.js

@@ -0,0 +1,41 @@
+const SESSION_PATTERN = /session_([0-9a-f-]{8,})/i;
+function asObject(value) {
+    return typeof value === 'object' && value !== null ? value : undefined;
+}
+/**
+ * Ispeziona il corpo della richiesta per ricavare modello e sessione, e
+ * garantisce che l'upstream restituisca i contatori di usage.
+ *
+ * Per gli endpoint in stile OpenAI l'usage in streaming e' opzionale e va
+ * richiesto esplicitamente con `stream_options.include_usage`; senza di esso
+ * la risposta non conterrebbe alcun contatore. Gli endpoint Anthropic lo
+ * includono sempre e il corpo resta invariato.
+ */
+export function inspectRequest(path, body) {
+    if (body.length === 0)
+        return { stream: false, body };
+    let parsed;
+    try {
+        parsed = JSON.parse(body.toString('utf-8'));
+    }
+    catch {
+        return { stream: false, body };
+    }
+    const root = asObject(parsed);
+    if (!root)
+        return { stream: false, body };
+    const model = typeof root.model === 'string' ? root.model : undefined;
+    const stream = root.stream === true;
+    let sessionId;
+    const metadata = asObject(root.metadata);
+    if (typeof metadata?.user_id === 'string') {
+        sessionId = SESSION_PATTERN.exec(metadata.user_id)?.[1];
+    }
+    const isOpenAiStyle = path.includes('/chat/completions') || path.includes('/responses');
+    if (stream && isOpenAiStyle && root.stream_options === undefined) {
+        root.stream_options = { include_usage: true };
+        return { model, sessionId, stream, body: Buffer.from(JSON.stringify(root), 'utf-8') };
+    }
+    return { model, sessionId, stream, body };
+}
+//# sourceMappingURL=inspectRequest.js.map

package/dist/proxy/inspectRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspectRequest.js","sourceRoot":"","sources":["../../src/proxy/inspectRequest.ts"],"names":[],"mappings":"AAQA,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAEtD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAE1C,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAEpC,IAAI,SAA6B,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1C,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACxF,IAAI,MAAM,IAAI,aAAa,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACjE,IAAI,CAAC,cAAc,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,7 @@
+import { type FastifyInstance } from 'fastify';
+import type { ClientConfig } from './config.js';
+export interface App {
+    server: FastifyInstance;
+    close: () => Promise<void>;
+}
+export declare function buildApp(config: ClientConfig): Promise<App>;

package/dist/server.js

@@ -0,0 +1,66 @@
+import { readFileSync } from 'node:fs';
+import Fastify from 'fastify';
+import { UsageForwarder } from './collector/forwarder.js';
+import { createProxyHandler } from './proxy/handler.js';
+import { ProjectDetector } from './projectDetector.js';
+function createServer(config) {
+    const options = {
+        logger: { level: config.logLevel },
+        // Le sessioni agentiche possono restare aperte a lungo.
+        requestTimeout: 0,
+        keepAliveTimeout: 120_000,
+        bodyLimit: 64 * 1024 * 1024,
+        // Il log per-richiesta duplicherebbe il record di usage senza aggiungere
+        // nulla. Deprecato in Fastify 5, da migrare a `logController` in v6.
+        disableRequestLogging: true,
+    };
+    if (!config.tlsKeyPath || !config.tlsCertPath)
+        return Fastify(options);
+    // In TLS l'istanza Fastify e' tipizzata su https.Server: l'interfaccia
+    // pubblica usata qui e' identica, quindi si normalizza il tipo.
+    return Fastify({
+        ...options,
+        https: {
+            key: readFileSync(config.tlsKeyPath),
+            cert: readFileSync(config.tlsCertPath),
+        },
+    });
+}
+export async function buildApp(config) {
+    const server = createServer(config);
+    // Il proxy deve inoltrare il corpo byte per byte, senza reinterpretarlo.
+    server.removeAllContentTypeParsers();
+    server.addContentTypeParser('*', { parseAs: 'buffer' }, (_request, body, done) => {
+        done(null, body);
+    });
+    const forwarder = new UsageForwarder(config, server.log);
+    forwarder.start();
+    const detector = new ProjectDetector({
+        roots: config.workspaceRoots,
+        markers: config.projectMarkers,
+        stickyTtlMs: config.projectStickyTtlMs,
+        maxScanBytes: 4 * 1024 * 1024,
+    });
+    if (!detector.enabled) {
+        server.log.warn('WORKSPACE_ROOTS non impostato: il progetto va dichiarato esplicitamente, altrimenti il traffico finisce in `unassigned`');
+    }
+    server.get('/_health', async () => ({
+        ok: true,
+        upstream: config.upstreamBaseUrl,
+        collector: config.collectorUrl,
+        projectDetection: detector.enabled,
+    }));
+    server.route({
+        method: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS', 'HEAD'],
+        url: '/*',
+        handler: createProxyHandler(config, forwarder, detector),
+    });
+    return {
+        server,
+        close: async () => {
+            await server.close();
+            await forwarder.close();
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,OAA4D,MAAM,SAAS,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAOvD,SAAS,YAAY,CAAC,MAAoB;IACxC,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;QAClC,wDAAwD;QACxD,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,OAAO;QACzB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,yEAAyE;QACzE,qEAAqE;QACrE,qBAAqB,EAAE,IAAI;KACG,CAAC;IAEjC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvE,uEAAuE;IACvE,gEAAgE;IAChE,OAAO,OAAO,CAAC;QACb,GAAG,OAAO;QACV,KAAK,EAAE;YACL,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;YACpC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC;SACvC;KACF,CAA+B,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAoB;IACjD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEpC,yEAAyE;IACzE,MAAM,CAAC,2BAA2B,EAAE,CAAC;IACrC,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/E,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzD,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,cAAc;QAC5B,OAAO,EAAE,MAAM,CAAC,cAAc;QAC9B,WAAW,EAAE,MAAM,CAAC,kBAAkB;QACtC,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,IAAI,CACb,yHAAyH,CAC1H,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAClC,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,MAAM,CAAC,eAAe;QAChC,SAAS,EAAE,MAAM,CAAC,YAAY;QAC9B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;KACnC,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC;QACX,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;QACpE,GAAG,EAAE,IAAI;QACT,OAAO,EAAE,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;KACzD,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/usage/collector.d.ts

@@ -0,0 +1,25 @@
+import type { ParsedUsage } from './types.js';
+/**
+ * Raccoglitore di usage indipendente dal dialetto upstream.
+ *
+ * Il proxy non sa a priori se la risposta e' in formato Anthropic Messages o
+ * OpenAI chat completions (dipende da come e' configurato l'upstream), quindi
+ * alimenta entrambi gli accumulatori e tiene il primo che produce un risultato.
+ * Gli eventi dell'uno sono inerti per l'altro, perche' le forme dei payload
+ * non si sovrappongono.
+ */
+export declare class UsageCollector {
+    private readonly streaming;
+    private readonly anthropic;
+    private readonly openai;
+    private readonly sse;
+    private nonStreamChunks;
+    private nonStreamBytes;
+    /** Oltre questa soglia si smette di bufferizzare una risposta non-stream. */
+    private static readonly MAX_BUFFERED_BYTES;
+    constructor(streaming: boolean);
+    push(chunk: Uint8Array): void;
+    finish(): ParsedUsage | undefined;
+}
+/** Euristica: la risposta e' uno stream SSE? */
+export declare function isStreamingResponse(contentType: string | undefined): boolean;

package/dist/usage/collector.js

@@ -0,0 +1,63 @@
+import { AnthropicUsageAccumulator, parseAnthropicResponse } from './parseAnthropic.js';
+import { OpenAIUsageAccumulator, parseOpenAIResponse } from './parseOpenAI.js';
+import { SseParser } from './sse.js';
+/**
+ * Raccoglitore di usage indipendente dal dialetto upstream.
+ *
+ * Il proxy non sa a priori se la risposta e' in formato Anthropic Messages o
+ * OpenAI chat completions (dipende da come e' configurato l'upstream), quindi
+ * alimenta entrambi gli accumulatori e tiene il primo che produce un risultato.
+ * Gli eventi dell'uno sono inerti per l'altro, perche' le forme dei payload
+ * non si sovrappongono.
+ */
+export class UsageCollector {
+    streaming;
+    anthropic = new AnthropicUsageAccumulator();
+    openai = new OpenAIUsageAccumulator();
+    sse;
+    nonStreamChunks = [];
+    nonStreamBytes = 0;
+    /** Oltre questa soglia si smette di bufferizzare una risposta non-stream. */
+    static MAX_BUFFERED_BYTES = 8 * 1024 * 1024;
+    constructor(streaming) {
+        this.streaming = streaming;
+        this.sse = new SseParser((payload) => {
+            this.anthropic.handleEvent(payload);
+            this.openai.handleEvent(payload);
+        });
+    }
+    push(chunk) {
+        if (this.streaming) {
+            this.sse.push(chunk);
+            return;
+        }
+        if (this.nonStreamBytes + chunk.byteLength > UsageCollector.MAX_BUFFERED_BYTES)
+            return;
+        this.nonStreamChunks.push(chunk);
+        this.nonStreamBytes += chunk.byteLength;
+    }
+    finish() {
+        if (this.streaming) {
+            this.sse.end();
+            return this.anthropic.result() ?? this.openai.result();
+        }
+        if (this.nonStreamChunks.length === 0)
+            return undefined;
+        let body;
+        try {
+            body = JSON.parse(Buffer.concat(this.nonStreamChunks).toString('utf-8'));
+        }
+        catch {
+            return undefined;
+        }
+        finally {
+            this.nonStreamChunks = [];
+        }
+        return parseAnthropicResponse(body) ?? parseOpenAIResponse(body);
+    }
+}
+/** Euristica: la risposta e' uno stream SSE? */
+export function isStreamingResponse(contentType) {
+    return (contentType ?? '').toLowerCase().includes('text/event-stream');
+}
+//# sourceMappingURL=collector.js.map

package/dist/usage/collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collector.js","sourceRoot":"","sources":["../../src/usage/collector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAc;IAUI;IATZ,SAAS,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC5C,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACtC,GAAG,CAAY;IACxB,eAAe,GAAiB,EAAE,CAAC;IACnC,cAAc,GAAG,CAAC,CAAC;IAE3B,6EAA6E;IACrE,MAAM,CAAU,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAE7D,YAA6B,SAAkB;QAAlB,cAAS,GAAT,SAAS,CAAS;QAC7C,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAiB;QACpB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,UAAU,GAAG,cAAc,CAAC,kBAAkB;YAAE,OAAO;QACvF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;QAC5B,CAAC;QACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;;AAGH,gDAAgD;AAChD,MAAM,UAAU,mBAAmB,CAAC,WAA+B;IACjE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;AACzE,CAAC"}

package/dist/usage/parseAnthropic.d.ts

@@ -0,0 +1,23 @@
+import { type ParsedUsage } from './types.js';
+/**
+ * Estrae i token da un blocco `usage` in formato Anthropic Messages API.
+ *
+ * In Anthropic `input_tokens` esclude gia' i token di cache, quindi non
+ * serve alcuna sottrazione.
+ */
+export declare function readAnthropicUsageBlock(usage: unknown): ParsedUsage | undefined;
+/**
+ * Accumulatore per uno stream Anthropic.
+ *
+ * Lo stream distribuisce l'informazione su due eventi:
+ *  - `message_start` porta gli input token (definitivi) e un output parziale
+ *  - `message_delta` porta gli output token cumulativi finali
+ */
+export declare class AnthropicUsageAccumulator {
+    private usage;
+    private seen;
+    handleEvent(payload: unknown): void;
+    result(): ParsedUsage | undefined;
+}
+/** Risposta Anthropic non-streaming. */
+export declare function parseAnthropicResponse(body: unknown): ParsedUsage | undefined;