@young1lin/dsh-gpt-sub 0.1.0

package/lib/jwt.js

@@ -0,0 +1,29 @@
+/**
+ * Minimal JWT claim reader. Only the `exp` claim is needed, and signature
+ * verification is deliberately absent: these tokens are read from the user's
+ * own credential file, never accepted from a remote party.
+ *
+ * @module dsh-gpt-sub/jwt
+ */
+/**
+ * Read a JWT's expiry.
+ *
+ * @param token - a candidate JWT; opaque strings are tolerated.
+ * @returns expiry in epoch milliseconds, or undefined when absent or undecodable.
+ */
+export function jwtExpiryMs(token) {
+    const payload = token.split('.')[1];
+    if (payload === undefined)
+        return undefined;
+    try {
+        const claims = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+        if (typeof claims !== 'object' || claims === null)
+            return undefined;
+        const exp = claims.exp;
+        return typeof exp === 'number' ? exp * 1000 : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=jwt.js.map

package/lib/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QACtF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QACnE,MAAM,GAAG,GAAI,MAA4B,CAAC,GAAG,CAAA;QAC7C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/lib/proxy-config.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Runtime proxy configuration: request-body reading, URL validation, and the
+ * persisted override the settings panel writes.
+ *
+ * The override file exists because cordis config layers are the loader's
+ * property -- a panel edit cannot rewrite them. The file holds the panel's
+ * last saved choice; when present, it wins over the config's proxyUrl so a
+ * page edit survives restarts.
+ *
+ * @module dsh-gpt-sub/proxy-config
+ */
+import type { IncomingMessage } from 'node:http';
+/**
+ * Validate a caller-supplied proxy URL.
+ *
+ * @param value - the candidate value from a request body.
+ * @returns the trimmed URL, or the empty string for a direct connection.
+ * @throws Error when the value is not a string or not an http(s) URL.
+ */
+export declare function validateProxyUrl(value: unknown): string;
+/**
+ * Mask any userinfo credentials in a proxy URL, for logging.
+ *
+ * The URL itself is worth logging; the password inside it is not. A URL
+ * without credentials is returned exactly as given.
+ *
+ * @param url - the proxy URL as configured.
+ * @returns the URL with its userinfo, if any, replaced by `***`.
+ */
+export declare function redactProxyUrl(url: string): string;
+/**
+ * Whether a request's Origin header names an origin other than the host the
+ * request was addressed to.
+ *
+ * The mutating routes must refuse such requests: a page on another origin can
+ * otherwise make the harness reroute its credentials through a proxy of the
+ * page's choosing. An absent Origin passes -- browsers always set one on a
+ * POST, so absence means a non-browser client such as curl.
+ *
+ * @param request - the incoming request.
+ * @returns true when Origin is present and names another host.
+ */
+export declare function crossOrigin(request: IncomingMessage): boolean;
+/**
+ * Read one JSON object request body.
+ *
+ * A body that declares a content-type must declare JSON: browsers refuse to
+ * send `application/json` cross-origin without a preflight, so the check
+ * turns every form a forged cross-site POST can take into a refusal. An
+ * absent content-type passes for non-browser clients that send none.
+ *
+ * @param request - the incoming request whose body to consume.
+ * @param limitBytes - the maximum body size accepted.
+ * @returns the parsed object.
+ * @throws Error when the body is oversized, unparseable, not an object, or
+ *   not JSON-content-typed.
+ */
+export declare function readJsonObject(request: IncomingMessage, limitBytes?: number): Promise<Record<string, unknown>>;
+/** The state file's on-disk shape; each field stands alone. */
+export interface StateOverride {
+    /** The saved proxy URL; empty string means direct. */
+    proxyUrl?: string;
+    /** The saved credential-file path, exactly as typed on the page. */
+    authFile?: string;
+}
+/**
+ * Load the persisted panel overrides.
+ *
+ * An absent file simply means "no override". A corrupt file is ignored too:
+ * the panel that wrote it may have died mid-write, and failing the whole
+ * plugin over a status file would trade working settings for a stale byte.
+ *
+ * Each known field validates on its own, so one invalid value drops without
+ * discarding the other choice the panel made.
+ *
+ * @param path - the state file's path.
+ * @returns the saved choices, or undefined when there is no readable file.
+ */
+export declare function loadStateOverride(path: string): Promise<StateOverride | undefined>;
+/**
+ * Persist the panel's choices atomically, so a crash never leaves a half write.
+ *
+ * The object is written exactly as given; callers read-modify-write so saving
+ * one choice never erases the other.
+ *
+ * @param path - the state file's path.
+ * @param state - the choices to persist; absent fields mean "use the config".
+ * @returns nothing; failures propagate to the caller.
+ */
+export declare function saveStateOverride(path: string, state: StateOverride): Promise<void>;
+//# sourceMappingURL=proxy-config.d.ts.map

package/lib/proxy-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-config.d.ts","sourceRoot":"","sources":["../src/proxy-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAahD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAcvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAY7D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,UAAU,SAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA0BlC;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA+BxF;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAYzF"}

package/lib/proxy-config.js

@@ -0,0 +1,213 @@
+/**
+ * Runtime proxy configuration: request-body reading, URL validation, and the
+ * persisted override the settings panel writes.
+ *
+ * The override file exists because cordis config layers are the loader's
+ * property -- a panel edit cannot rewrite them. The file holds the panel's
+ * last saved choice; when present, it wins over the config's proxyUrl so a
+ * page edit survives restarts.
+ *
+ * @module dsh-gpt-sub/proxy-config
+ */
+import { readFile, rename, rm, writeFile } from 'node:fs/promises';
+/** Bodies larger than this are refused rather than buffered. */
+const BODY_LIMIT_BYTES = 65_536;
+/** Read one header, tolerating the array form node uses for repeated headers. */
+function header(request, name) {
+    const value = request.headers?.[name];
+    if (Array.isArray(value))
+        return value[0];
+    return value;
+}
+/**
+ * Validate a caller-supplied proxy URL.
+ *
+ * @param value - the candidate value from a request body.
+ * @returns the trimmed URL, or the empty string for a direct connection.
+ * @throws Error when the value is not a string or not an http(s) URL.
+ */
+export function validateProxyUrl(value) {
+    if (typeof value !== 'string')
+        throw new Error('proxyUrl must be a string');
+    const trimmed = value.trim();
+    if (trimmed === '')
+        return '';
+    let parsed;
+    try {
+        parsed = new URL(trimmed);
+    }
+    catch {
+        throw new Error(`proxyUrl is not a valid URL: ${trimmed}`);
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new Error(`proxyUrl must be http or https, got ${parsed.protocol}`);
+    }
+    return trimmed;
+}
+/**
+ * Mask any userinfo credentials in a proxy URL, for logging.
+ *
+ * The URL itself is worth logging; the password inside it is not. A URL
+ * without credentials is returned exactly as given.
+ *
+ * @param url - the proxy URL as configured.
+ * @returns the URL with its userinfo, if any, replaced by `***`.
+ */
+export function redactProxyUrl(url) {
+    if (url === '')
+        return '';
+    const scheme = /^https?:\/\//.exec(url);
+    if (scheme === null)
+        return url;
+    const rest = url.slice(scheme[0].length);
+    const credentialsEnd = rest.indexOf('@');
+    if (credentialsEnd === -1)
+        return url;
+    // Replace the userinfo by string surgery rather than URL re-serialisation,
+    // so everything after the `@` stays byte-identical to what was configured.
+    return `${scheme[0]}***@${rest.slice(credentialsEnd + 1)}`;
+}
+/**
+ * Whether a request's Origin header names an origin other than the host the
+ * request was addressed to.
+ *
+ * The mutating routes must refuse such requests: a page on another origin can
+ * otherwise make the harness reroute its credentials through a proxy of the
+ * page's choosing. An absent Origin passes -- browsers always set one on a
+ * POST, so absence means a non-browser client such as curl.
+ *
+ * @param request - the incoming request.
+ * @returns true when Origin is present and names another host.
+ */
+export function crossOrigin(request) {
+    const origin = header(request, 'origin');
+    if (origin === undefined || origin === '')
+        return false;
+    const host = header(request, 'host');
+    if (host === undefined || host === '')
+        return true;
+    try {
+        // Comparing through URL normalises default ports away on both sides.
+        return new URL(origin).host !== new URL(`http://${host}`).host;
+    }
+    catch {
+        // An unparsable Origin (including the literal "null") vouches for nothing.
+        return true;
+    }
+}
+/**
+ * Read one JSON object request body.
+ *
+ * A body that declares a content-type must declare JSON: browsers refuse to
+ * send `application/json` cross-origin without a preflight, so the check
+ * turns every form a forged cross-site POST can take into a refusal. An
+ * absent content-type passes for non-browser clients that send none.
+ *
+ * @param request - the incoming request whose body to consume.
+ * @param limitBytes - the maximum body size accepted.
+ * @returns the parsed object.
+ * @throws Error when the body is oversized, unparseable, not an object, or
+ *   not JSON-content-typed.
+ */
+export async function readJsonObject(request, limitBytes = BODY_LIMIT_BYTES) {
+    const contentType = header(request, 'content-type');
+    if (contentType !== undefined) {
+        const mediaType = contentType.split(';')[0]?.trim().toLowerCase() ?? '';
+        if (mediaType !== 'application/json') {
+            throw new Error(`request body content-type must be application/json, got "${mediaType}"`);
+        }
+    }
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        const piece = typeof chunk === 'string' ? Buffer.from(chunk) : chunk;
+        size += piece.length;
+        if (size > limitBytes)
+            throw new Error('request body too large');
+        chunks.push(piece);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    catch {
+        throw new Error('request body is not valid JSON');
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new Error('request body must be a JSON object');
+    }
+    return parsed;
+}
+/**
+ * Load the persisted panel overrides.
+ *
+ * An absent file simply means "no override". A corrupt file is ignored too:
+ * the panel that wrote it may have died mid-write, and failing the whole
+ * plugin over a status file would trade working settings for a stale byte.
+ *
+ * Each known field validates on its own, so one invalid value drops without
+ * discarding the other choice the panel made.
+ *
+ * @param path - the state file's path.
+ * @returns the saved choices, or undefined when there is no readable file.
+ */
+export async function loadStateOverride(path) {
+    let raw;
+    try {
+        raw = await readFile(path, 'utf8');
+    }
+    catch {
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+        return undefined;
+    const document = parsed;
+    const state = {};
+    const proxyUrl = document['proxyUrl'];
+    if (typeof proxyUrl === 'string') {
+        try {
+            state.proxyUrl = validateProxyUrl(proxyUrl);
+        }
+        catch {
+            // A stale invalid proxy falls back to the config rather than
+            // invalidating the whole file.
+        }
+    }
+    const authFile = document['authFile'];
+    if (typeof authFile === 'string' && authFile.trim() !== '') {
+        state.authFile = authFile.trim();
+    }
+    return state;
+}
+/**
+ * Persist the panel's choices atomically, so a crash never leaves a half write.
+ *
+ * The object is written exactly as given; callers read-modify-write so saving
+ * one choice never erases the other.
+ *
+ * @param path - the state file's path.
+ * @param state - the choices to persist; absent fields mean "use the config".
+ * @returns nothing; failures propagate to the caller.
+ */
+export async function saveStateOverride(path, state) {
+    const temporary = `${path}.tmp-${String(process.pid)}`;
+    // The file can hold a proxy URL with embedded credentials and a private
+    // filesystem layout, so create it private to the user, the same way
+    // token-store writes auth.json.
+    await writeFile(temporary, JSON.stringify(state, null, 2), { encoding: 'utf8', mode: 0o600 });
+    try {
+        await rename(temporary, path);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=proxy-config.js.map

package/lib/proxy-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-config.js","sourceRoot":"","sources":["../src/proxy-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAElE,gEAAgE;AAChE,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAE/B,iFAAiF;AACjF,SAAS,MAAM,CAAC,OAAwB,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;IACzC,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,CAAA;IAC7B,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAA;IACzB,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,GAAG,CAAA;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,cAAc,KAAK,CAAC,CAAC;QAAE,OAAO,GAAG,CAAA;IACrC,2EAA2E;IAC3E,2EAA2E;IAC3E,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,EAAE,CAAA;AAC5D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,OAAwB;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAA;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAClD,IAAI,CAAC;QACH,qEAAqE;QACrE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAwB,EACxB,UAAU,GAAG,gBAAgB;IAE7B,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAA;QACvE,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,4DAA4D,SAAS,GAAG,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAA;QAChF,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;QACpB,IAAI,IAAI,GAAG,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAChE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,MAAiC,CAAA;AAC1C,CAAC;AAUD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5F,MAAM,QAAQ,GAAG,MAAiC,CAAA;IAElD,MAAM,KAAK,GAAkB,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,KAAK,CAAC,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAoB;IACxE,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;IACtD,wEAAwE;IACxE,oEAAoE;IACpE,gCAAgC;IAChC,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7F,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACpC,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/proxy-probe.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Connectivity probe for a candidate proxy: one real usage read through a
+ * throwaway ProxyAgent, timed, answering ok/latency or the failure text.
+ *
+ * This is the host half of the panel's "test connection" button. It exercises
+ * the exact path production traffic takes -- same host, same endpoint, same
+ * dispatcher kind -- so a green result means model calls will connect, not
+ * merely that the proxy's TCP port answers.
+ *
+ * @module dsh-gpt-sub/proxy-probe
+ */
+import { fetch as undiciFetch } from 'undici';
+/** What the probe answers. */
+export interface ProxyProbeResult {
+    /** True when the usage endpoint answered through the candidate. */
+    ok: boolean;
+    /** Round-trip milliseconds; present on success. */
+    latencyMs?: number;
+    /** Subscription plan reported upstream; present on success when known. */
+    plan?: string;
+    /** Failure text; present when ok is false. */
+    message?: string;
+}
+/** Construction options; the injectable seams exist for tests. */
+export interface ProxyProbeOptions {
+    /** Candidate proxy URL; empty string probes a direct connection. */
+    readonly proxyUrl: string;
+    /** A live access token for the usage call. */
+    readonly accessToken: string;
+    /** Per-probe timeout; defaults to {@link DEFAULT_TIMEOUT_MS}. */
+    readonly timeoutMs?: number;
+    /** Injectable fetch, defaulting to undici's. */
+    readonly fetchImpl?: typeof undiciFetch;
+    /** Injectable clock, defaulting to Date.now. */
+    readonly now?: () => number;
+}
+/**
+ * Probe one candidate proxy with a single usage read.
+ *
+ * The probe's ProxyAgent is private: it is created here and closed here, so a
+ * probe can never leak dispatcher state into the live routing.
+ *
+ * @param options - the candidate and the credentials to read with.
+ * @returns the probe outcome, never a rejection.
+ */
+export declare function probeProxy(options: ProxyProbeOptions): Promise<ProxyProbeResult>;
+//# sourceMappingURL=proxy-probe.d.ts.map

package/lib/proxy-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-probe.d.ts","sourceRoot":"","sources":["../src/proxy-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAc,KAAK,IAAI,WAAW,EAAE,MAAM,QAAQ,CAAA;AAMzD,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,EAAE,EAAE,OAAO,CAAA;IACX,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,8CAA8C;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,WAAW,CAAA;IACvC,gDAAgD;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2BtF"}

package/lib/proxy-probe.js

@@ -0,0 +1,51 @@
+/**
+ * Connectivity probe for a candidate proxy: one real usage read through a
+ * throwaway ProxyAgent, timed, answering ok/latency or the failure text.
+ *
+ * This is the host half of the panel's "test connection" button. It exercises
+ * the exact path production traffic takes -- same host, same endpoint, same
+ * dispatcher kind -- so a green result means model calls will connect, not
+ * merely that the proxy's TCP port answers.
+ *
+ * @module dsh-gpt-sub/proxy-probe
+ */
+import { ProxyAgent } from 'undici';
+import { fetchUsage } from "./usage.js";
+/** Default ceiling on one probe; a proxy that cannot answer this is broken. */
+const DEFAULT_TIMEOUT_MS = 15_000;
+/**
+ * Probe one candidate proxy with a single usage read.
+ *
+ * The probe's ProxyAgent is private: it is created here and closed here, so a
+ * probe can never leak dispatcher state into the live routing.
+ *
+ * @param options - the candidate and the credentials to read with.
+ * @returns the probe outcome, never a rejection.
+ */
+export async function probeProxy(options) {
+    const { proxyUrl, accessToken } = options;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const now = options.now ?? (() => Date.now());
+    const agent = proxyUrl === '' ? undefined : new ProxyAgent(proxyUrl);
+    const started = now();
+    try {
+        const usage = await fetchUsage(accessToken, agent, options.fetchImpl, AbortSignal.timeout(timeoutMs));
+        const latencyMs = now() - started;
+        return {
+            ok: true,
+            latencyMs,
+            ...(usage.plan_type === undefined ? {} : { plan: usage.plan_type }),
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            message: error instanceof Error ? error.message : String(error),
+        };
+    }
+    finally {
+        if (agent !== undefined)
+            await agent.close().catch(() => undefined);
+    }
+}
+//# sourceMappingURL=proxy-probe.js.map

package/lib/proxy-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-probe.js","sourceRoot":"","sources":["../src/proxy-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAwB,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvC,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,MAAM,CAAA;AA4BjC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;IACpE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAA;IACrB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAC5B,WAAW,EACX,KAAK,EACL,OAAO,CAAC,SAAS,EACjB,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAC/B,CAAA;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,OAAO,CAAA;QACjC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACpE,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAA;IACH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACrE,CAAC;AACH,CAAC"}

package/lib/proxy-routing.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Host-scoped proxy routing for the process-wide undici dispatcher.
+ *
+ * pi-ai issues its own requests through the global `fetch`, so this plugin
+ * cannot hand it a dispatcher the way it hands one to `TokenStore`. The only
+ * seam is undici's global dispatcher -- but replacing that wholesale would
+ * push every provider in the harness through the proxy, including endpoints
+ * that must not go near it.
+ *
+ * So route by hostname: the Codex hosts go through the proxy, everything else
+ * continues to whatever dispatcher was installed before. Reaching
+ * `chatgpt.com` from an unproxied address here answers 403 with a Cloudflare
+ * block page, which surfaces as an unreadable HTML body rather than an API
+ * error, so this is the difference between working and not.
+ *
+ * @module dsh-gpt-sub/proxy-routing
+ */
+import { Dispatcher } from 'undici';
+/**
+ * Hosts that must egress through the proxy: the Codex API and the OAuth token
+ * endpoint the refresh calls. Subdomains match too.
+ */
+export declare const PROXIED_HOSTS: readonly string[];
+/**
+ * Whether a hostname belongs to one of `hosts`, matching the host itself and
+ * any subdomain of it.
+ *
+ * @param hostname - the hostname to test.
+ * @param hosts - the suffixes to match against.
+ * @returns true when the hostname should be proxied.
+ */
+export declare function shouldProxy(hostname: string, hosts?: readonly string[]): boolean;
+/**
+ * A dispatcher that sends matching hosts to one delegate and everything else
+ * to another.
+ *
+ * Only the proxy delegate is owned: `close`/`destroy` never touch the
+ * fallback, because that dispatcher belongs to the host and outlives this
+ * plugin.
+ */
+export declare class HostRoutingDispatcher extends Dispatcher {
+    #private;
+    constructor(proxy: Dispatcher, fallback: Dispatcher, hosts?: readonly string[]);
+    /**
+     * Route one request by its origin's hostname.
+     *
+     * An origin that cannot be parsed is sent to the fallback: defaulting to the
+     * proxy would silently divert unrelated traffic.
+     *
+     * @param options - undici dispatch options.
+     * @param handler - undici dispatch handler.
+     * @returns whatever the chosen delegate returns.
+     */
+    dispatch(options: Dispatcher.DispatchOptions, handler: Dispatcher.DispatchHandler): boolean;
+    /** Close only the proxy delegate; the fallback belongs to the host. */
+    close(): Promise<void>;
+    /** Destroy only the proxy delegate; the fallback belongs to the host. */
+    destroy(): Promise<void>;
+}
+/**
+ * Retry options that absorb a dropped connection without taking on any
+ * HTTP-level retry policy.
+ *
+ * `statusCodes: []` is deliberate: an upstream 429 or 500 carries a body DSH
+ * knows how to read and surface, and retrying here would swallow it. This
+ * dispatcher's job is narrow -- make the flaky link look reliable -- and every
+ * HTTP semantic stays with the harness.
+ *
+ * `POST` is listed even though undici omits it by default, because undici
+ * omits it for non-idempotency: a POST that may have been received must not be
+ * replayed. That does not apply to what is retried here. A connection error
+ * arrives before any response, and undici refuses to replay a request whose
+ * body was already consumed; a partially streamed response is caught by
+ * undici's own range check rather than silently concatenated. Model calls are
+ * POSTs, so without this the retry would never fire at all.
+ *
+ * @param maxRetries - how many extra attempts a single request may make.
+ * @returns options for undici's retry interceptor.
+ */
+export declare function connectionRetryOptions(maxRetries: number): {
+    maxRetries: number;
+    methods: string[];
+    statusCodes: number[];
+    errorCodes: string[];
+    minTimeout: number;
+    maxTimeout: number;
+    timeoutFactor: number;
+};
+/** What {@link installProxyRouting} returns, so the caller can undo it. */
+export interface ProxyRouting {
+    /** The proxy agent, for handing to components that take an explicit dispatcher. */
+    readonly dispatcher: Dispatcher;
+    /** Restore the previous global dispatcher and close the proxy agent. */
+    readonly uninstall: () => Promise<void>;
+}
+/** Options for {@link installProxyRouting}. */
+export interface ProxyRoutingOptions {
+    /** Hostnames to proxy; defaults to {@link PROXIED_HOSTS}. */
+    readonly hosts?: readonly string[];
+    /** Extra attempts per request after a connection failure. 0 disables retry. */
+    readonly maxRetries?: number;
+}
+/**
+ * Install host-scoped proxy routing as the global dispatcher.
+ *
+ * @param proxyUrl - the proxy to route the Codex hosts through.
+ * @param options - hosts to proxy and how hard to retry a dropped connection.
+ * @returns the proxy dispatcher and the function that restores the previous global.
+ */
+export declare function installProxyRouting(proxyUrl: string, options?: ProxyRoutingOptions): ProxyRouting;
+//# sourceMappingURL=proxy-routing.d.ts.map

package/lib/proxy-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-routing.d.ts","sourceRoot":"","sources":["../src/proxy-routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAsE,MAAM,QAAQ,CAAA;AAwBvG;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAAyD,CAAA;AAEpG;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,MAAM,EAAkB,GAAG,OAAO,CAG/F;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,UAAU;;gBAKvC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,GAAE,SAAS,MAAM,EAAkB;IAO7F;;;;;;;;;OASG;IACM,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC,eAAe,GAAG,OAAO;IAYpG,uEAAuE;IACxD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrC,yEAAyE;IAC1D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAGxC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG;IAC1D,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;CACtB,CAYA;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACxC;AAED,+CAA+C;AAC/C,MAAM,WAAW,mBAAmB;IAClC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,YAAY,CAyBrG"}