ai-cc-router 0.1.0

package/dist/proxy/token-refresher.js

@@ -0,0 +1,114 @@
+import { writeAccountsAtomic } from "../config/manager.js";
+import { logRefresh } from "./logger.js";
+import { stats } from "./stats.js";
+/**
+ * Official Claude Code CLI client_id for the OAuth PKCE flow.
+ * Source: extracted from Claude Code auth flow.
+ * Update this if Anthropic changes it in a future Claude Code version.
+ */
+const CLAUDE_CODE_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+/**
+ * Primary OAuth token endpoint.
+ * Alternative: https://claude.ai/v1/oauth/token
+ */
+const TOKEN_ENDPOINT = "https://console.anthropic.com/api/oauth/token";
+/** Refresh 10 minutes before expiry */
+const REFRESH_BUFFER_MS = 10 * 60 * 1000;
+/** Check every 5 minutes */
+const CHECK_INTERVAL_MS = 5 * 60 * 1000;
+/** Per-account refresh locks — prevent concurrent refreshes for the same account */
+const refreshLocks = new Map();
+export function needsRefresh(account) {
+    return (account.tokens.expiresAt - Date.now()) < REFRESH_BUFFER_MS;
+}
+export async function refreshAccountToken(account) {
+    // Deduplicate concurrent refresh calls for the same account
+    const existing = refreshLocks.get(account.id);
+    if (existing)
+        return existing;
+    const promise = _doRefresh(account);
+    refreshLocks.set(account.id, promise);
+    try {
+        return await promise;
+    }
+    finally {
+        refreshLocks.delete(account.id);
+    }
+}
+async function _doRefresh(account) {
+    try {
+        const res = await fetch(TOKEN_ENDPOINT, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+                grant_type: "refresh_token",
+                refresh_token: account.tokens.refreshToken,
+                client_id: CLAUDE_CODE_CLIENT_ID,
+            }),
+        });
+        if (!res.ok) {
+            const body = await res.text();
+            logRefresh(account.id, false);
+            console.error(`  Status: ${res.status} — ${body}`);
+            account.consecutiveErrors++;
+            if (account.consecutiveErrors >= 3)
+                account.healthy = false;
+            return false;
+        }
+        const data = await res.json();
+        // CRITICAL: refresh_token ROTATES — save the new one immediately or lose access permanently
+        account.tokens.accessToken = data.access_token;
+        account.tokens.refreshToken = data.refresh_token;
+        account.tokens.expiresAt = Date.now() + data.expires_in * 1000;
+        account.tokens.scopes = data.scope.split(" ");
+        account.healthy = true;
+        account.consecutiveErrors = 0;
+        account.lastRefresh = Date.now();
+        stats.totalRefreshes++;
+        stats.addLog({ ts: Date.now(), accountId: account.id, model: "-", type: "refresh" });
+        const expiresInMin = Math.round(data.expires_in / 60);
+        logRefresh(account.id, true, expiresInMin);
+        return true;
+    }
+    catch (err) {
+        logRefresh(account.id, false);
+        console.error(`  Error:`, err);
+        account.consecutiveErrors++;
+        if (account.consecutiveErrors >= 3)
+            account.healthy = false;
+        return false;
+    }
+}
+/**
+ * Persist all accounts to disk.
+ * Uses atomic write (tmp + rename) to prevent corruption if process dies mid-write.
+ * Must be called after every successful refresh since refresh_token ROTATES.
+ */
+export function saveAccounts(accounts) {
+    const records = accounts.map(a => ({
+        id: a.id,
+        accessToken: a.tokens.accessToken,
+        refreshToken: a.tokens.refreshToken,
+        expiresAt: a.tokens.expiresAt,
+        scopes: a.tokens.scopes,
+    }));
+    writeAccountsAtomic(records);
+}
+/**
+ * Background refresh loop: checks every 5 minutes and refreshes any
+ * token expiring within the REFRESH_BUFFER_MS window.
+ */
+export function startRefreshLoop(accounts) {
+    const check = async () => {
+        for (const account of accounts) {
+            if (needsRefresh(account)) {
+                const ok = await refreshAccountToken(account);
+                if (ok)
+                    saveAccounts(accounts);
+            }
+        }
+    };
+    // Run immediately on startup (catches already-expired tokens)
+    check().catch(console.error);
+    setInterval(() => { check().catch(console.error); }, CHECK_INTERVAL_MS);
+}

package/dist/proxy/types.js

@@ -0,0 +1 @@
+export {};

package/dist/ui/Dashboard.js

@@ -0,0 +1,110 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState, useEffect } from "react";
+import { Box, Text, useInput, useApp } from "ink";
+const POLL_INTERVAL_MS = 2_000;
+// ─── Dashboard component ──────────────────────────────────────────────────────
+export function Dashboard({ port }) {
+    const { exit } = useApp();
+    const [data, setData] = useState(null);
+    const [connectError, setConnectError] = useState(null);
+    const [lastUpdate, setLastUpdate] = useState(0);
+    const [retryCount, setRetryCount] = useState(0);
+    useInput((input, key) => {
+        if (input === "q" || key.escape)
+            exit();
+    });
+    useEffect(() => {
+        let cancelled = false;
+        const poll = async () => {
+            try {
+                const res = await fetch(`http://localhost:${port}/cc-router/health`, {
+                    signal: AbortSignal.timeout(1_500),
+                });
+                if (cancelled)
+                    return;
+                if (res.ok) {
+                    setData(await res.json());
+                    setConnectError(null);
+                    setLastUpdate(Date.now());
+                    setRetryCount(0);
+                }
+                else {
+                    setConnectError(`Proxy returned HTTP ${res.status}`);
+                }
+            }
+            catch {
+                if (cancelled)
+                    return;
+                setConnectError(`Cannot connect to http://localhost:${port}`);
+                setRetryCount(n => n + 1);
+            }
+        };
+        poll();
+        const timer = setInterval(poll, POLL_INTERVAL_MS);
+        return () => { cancelled = true; clearInterval(timer); };
+    }, [port]);
+    if (connectError) {
+        return _jsx(ErrorScreen, { error: connectError, port: port, retries: retryCount });
+    }
+    if (!data) {
+        return (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsxs(Text, { color: "yellow", children: ["\u280B Connecting to http://localhost:", port, "..."] }) }));
+    }
+    return _jsx(LiveDashboard, { data: data, port: port, lastUpdate: lastUpdate });
+}
+// ─── Error screen ─────────────────────────────────────────────────────────────
+function ErrorScreen({ error, port, retries }) {
+    return (_jsxs(Box, { flexDirection: "column", marginY: 1, marginX: 2, children: [_jsxs(Text, { color: "red", bold: true, children: ["\u2717 ", error] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: "yellow", children: "Is the proxy running? Start it with:" }), _jsx(Text, { color: "cyan", children: "  cc-router start" })] }), _jsxs(Box, { marginTop: 1, children: [_jsxs(Text, { color: "gray", children: ["Retrying every ", POLL_INTERVAL_MS / 1000, "s"] }), retries > 0 && _jsxs(Text, { color: "gray", children: ["  (attempt ", retries, ")"] }), _jsx(Text, { color: "gray", children: "  \u00B7  [q] quit" })] })] }));
+}
+// ─── Live dashboard ───────────────────────────────────────────────────────────
+function LiveDashboard({ data, port, lastUpdate }) {
+    const healthyCount = data.accounts.filter(a => a.healthy).length;
+    const updatedAgo = Math.round((Date.now() - lastUpdate) / 1000);
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { bold: true, color: "cyan", children: " CC-Router " }), _jsx(Text, { color: "gray", children: "\u00B7 " }), _jsx(Text, { color: "green", children: data.mode }), _jsxs(Text, { color: "gray", children: [" \u2192 ", data.target, "  \u00B7 "] }), _jsxs(Text, { children: ["up ", formatUptime(data.uptime)] }), _jsxs(Text, { color: "gray", children: ["  \u00B7  updated ", updatedAgo, "s ago  \u00B7  [q] quit"] })] }), _jsx(Box, { marginTop: 1 }), _jsxs(Box, { flexDirection: "column", children: [_jsxs(Text, { bold: true, children: [" ACCOUNTS  ", _jsxs(Text, { color: healthyCount === data.accounts.length ? "green" : "yellow", children: [healthyCount, "/", data.accounts.length, " healthy"] })] }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: data.accounts.map(a => (_jsx(AccountRow, { account: a }, a.id))) })] }), _jsx(Box, { marginTop: 1 }), _jsxs(Box, { children: [_jsx(Text, { bold: true, children: " TOTALS  " }), _jsx(Text, { children: "requests " }), _jsx(Text, { color: "cyan", children: data.totalRequests }), _jsx(Text, { color: "gray", children: "  \u00B7  " }), _jsx(Text, { children: "errors " }), _jsx(Text, { color: data.totalErrors > 0 ? "red" : "green", children: data.totalErrors }), _jsx(Text, { color: "gray", children: "  \u00B7  " }), _jsx(Text, { children: "refreshes " }), _jsx(Text, { color: "yellow", children: data.totalRefreshes })] }), _jsx(Box, { marginTop: 1 }), _jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, children: " RECENT ACTIVITY" }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: data.recentLogs.length === 0
+                            ? _jsx(Text, { color: "gray", children: "  No activity yet" })
+                            : data.recentLogs.slice(0, 10).map((log, i) => (_jsx(LogRow, { log: log }, i))) })] })] }));
+}
+// ─── Account row ──────────────────────────────────────────────────────────────
+function AccountRow({ account: a }) {
+    const dot = a.busy ? "◌" : a.healthy ? "●" : "●";
+    const dotColor = a.busy ? "yellow" : a.healthy ? "green" : "red";
+    const statusLabel = a.busy ? "busy   " : a.healthy ? "ok     " : "ERROR  ";
+    const statusColor = a.busy ? "yellow" : a.healthy ? "green" : "red";
+    const expiryLabel = a.expiresInMs > 0 ? formatMs(a.expiresInMs) : "EXPIRED";
+    const expiryColor = a.expiresInMs < 10 * 60 * 1000 ? "red"
+        : a.expiresInMs < 30 * 60 * 1000 ? "yellow"
+            : "white";
+    return (_jsxs(Box, { children: [_jsxs(Text, { color: dotColor, children: [" ", dot, " "] }), _jsx(Text, { children: a.id.slice(0, 22).padEnd(22) }), _jsx(Text, { color: statusColor, children: statusLabel }), _jsx(Text, { color: "gray", children: " req " }), _jsx(Text, { color: "white", children: String(a.requestCount).padStart(5) }), _jsx(Text, { color: "gray", children: "  err " }), _jsx(Text, { color: a.errorCount > 0 ? "red" : "gray", children: String(a.errorCount).padStart(3) }), _jsx(Text, { color: "gray", children: "  expires " }), _jsx(Text, { color: expiryColor, children: expiryLabel.padEnd(10) }), _jsx(Text, { color: "gray", children: "  last " }), _jsx(Text, { color: "gray", children: formatAgo(a.lastUsedMs) })] }));
+}
+// ─── Log row ──────────────────────────────────────────────────────────────────
+function LogRow({ log }) {
+    const time = new Date(log.ts).toLocaleTimeString("en-GB", { hour12: false });
+    const typeColor = log.type === "error" ? "red" : log.type === "refresh" ? "yellow" : "gray";
+    const typeIcon = log.type === "error" ? "✗" : log.type === "refresh" ? "↻" : "→";
+    return (_jsxs(Box, { children: [_jsxs(Text, { color: "gray", children: ["  ", time, "  "] }), _jsxs(Text, { color: typeColor, children: [typeIcon, " "] }), _jsx(Text, { color: "cyan", children: log.accountId.slice(0, 22).padEnd(22) }), _jsxs(Text, { color: typeColor, children: [" ", log.type] }), log.details && _jsxs(Text, { color: "gray", children: ["  ", log.details] })] }));
+}
+// ─── Formatters ───────────────────────────────────────────────────────────────
+function formatUptime(seconds) {
+    const h = Math.floor(seconds / 3_600);
+    const m = Math.floor((seconds % 3_600) / 60);
+    const s = seconds % 60;
+    if (h > 0)
+        return `${h}h ${m}m`;
+    if (m > 0)
+        return `${m}m ${s}s`;
+    return `${s}s`;
+}
+function formatMs(ms) {
+    const totalMin = Math.round(ms / 60_000);
+    if (totalMin >= 60)
+        return `${Math.floor(totalMin / 60)}h ${totalMin % 60}m`;
+    return `${totalMin}m`;
+}
+function formatAgo(ts) {
+    if (!ts)
+        return "never";
+    const s = Math.round((Date.now() - ts) / 1_000);
+    if (s < 60)
+        return `${s}s ago`;
+    const m = Math.floor(s / 60);
+    return `${m}m ago`;
+}

package/dist/utils/claude-config.js

@@ -0,0 +1,76 @@
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
+import { dirname } from "path";
+import { CLAUDE_SETTINGS_PATH } from "../config/paths.js";
+/**
+ * Write ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN into ~/.claude/settings.json.
+ *
+ * Rules from official Claude Code docs:
+ *   - ANTHROPIC_AUTH_TOKEN is sent as "Authorization: Bearer <value>"
+ *   - Do NOT append /v1 to ANTHROPIC_BASE_URL — Claude Code adds it automatically
+ *   - Merges with existing settings, preserving all other keys
+ */
+export function writeClaudeSettings(port) {
+    const dir = dirname(CLAUDE_SETTINGS_PATH);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    let existing = {};
+    if (existsSync(CLAUDE_SETTINGS_PATH)) {
+        try {
+            existing = JSON.parse(readFileSync(CLAUDE_SETTINGS_PATH, "utf-8"));
+        }
+        catch {
+            existing = {};
+        }
+    }
+    const existingEnv = existing["env"] ?? {};
+    const updated = {
+        ...existing,
+        env: {
+            ...existingEnv,
+            // ANTHROPIC_BASE_URL: no trailing /v1 — Claude Code appends it automatically
+            ANTHROPIC_BASE_URL: `http://localhost:${port}`,
+            // ANTHROPIC_AUTH_TOKEN has higher precedence than ANTHROPIC_API_KEY in Claude Code.
+            // The proxy replaces this placeholder with the real OAuth token per request.
+            ANTHROPIC_AUTH_TOKEN: "proxy-managed",
+        },
+    };
+    writeFileSync(CLAUDE_SETTINGS_PATH, JSON.stringify(updated, null, 2), "utf-8");
+}
+/**
+ * Remove cc-router settings from ~/.claude/settings.json.
+ * Called when uninstalling cc-router so Claude Code goes back to its default auth.
+ */
+export function removeClaudeSettings() {
+    if (!existsSync(CLAUDE_SETTINGS_PATH))
+        return;
+    try {
+        const existing = JSON.parse(readFileSync(CLAUDE_SETTINGS_PATH, "utf-8"));
+        const env = existing["env"];
+        if (env) {
+            delete env["ANTHROPIC_BASE_URL"];
+            delete env["ANTHROPIC_AUTH_TOKEN"];
+            if (Object.keys(env).length === 0)
+                delete existing["env"];
+        }
+        writeFileSync(CLAUDE_SETTINGS_PATH, JSON.stringify(existing, null, 2), "utf-8");
+    }
+    catch {
+        // If we can't parse it, leave it alone
+    }
+}
+/** Read current Claude Code proxy settings (for display) */
+export function readClaudeProxySettings() {
+    if (!existsSync(CLAUDE_SETTINGS_PATH))
+        return {};
+    try {
+        const raw = JSON.parse(readFileSync(CLAUDE_SETTINGS_PATH, "utf-8"));
+        const env = raw["env"];
+        return {
+            baseUrl: env?.["ANTHROPIC_BASE_URL"],
+            authToken: env?.["ANTHROPIC_AUTH_TOKEN"],
+        };
+    }
+    catch {
+        return {};
+    }
+}

package/dist/utils/platform.js

@@ -0,0 +1,13 @@
+export function detectPlatform() {
+    switch (process.platform) {
+        case "darwin": return "macos";
+        case "win32": return "windows";
+        default: return "linux";
+    }
+}
+export function isWindows() {
+    return process.platform === "win32";
+}
+export function isMacos() {
+    return process.platform === "darwin";
+}

package/dist/utils/token-extractor.js

@@ -0,0 +1,90 @@
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+import os from "os";
+const execFileAsync = promisify(execFile);
+/**
+ * macOS: extract OAuth tokens from the macOS Keychain.
+ * Uses execFile (not exec/execSync) — args are passed as an array,
+ * preventing any shell injection.
+ */
+export async function extractFromKeychain() {
+    try {
+        const { stdout } = await execFileAsync("security", [
+            "find-generic-password",
+            "-s", "Claude Code-credentials",
+            "-w",
+        ]);
+        return parseCredentialJson(stdout.trim());
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Linux / Windows: read from ~/.claude/.credentials.json.
+ * Claude Code writes credentials here on non-macOS platforms.
+ * No shell — pure Node.js file read.
+ */
+export function extractFromCredentialsFile() {
+    const credPath = join(os.homedir(), ".claude", ".credentials.json");
+    if (!existsSync(credPath))
+        return null;
+    try {
+        const raw = JSON.parse(readFileSync(credPath, "utf-8"));
+        // The file can have two shapes:
+        //   { claudeAiOauth: { accessToken, refreshToken, expiresAt, scopes } }
+        //   { accessToken, refreshToken, expiresAt, scopes }  (direct)
+        const oauth = raw.claudeAiOauth ?? raw;
+        return parseCredentialJson(oauth);
+    }
+    catch {
+        return null;
+    }
+}
+/** Parse and normalise either a raw JSON string or an already-parsed object. */
+function parseCredentialJson(raw) {
+    try {
+        const obj = typeof raw === "string" ? JSON.parse(raw) : raw;
+        const accessToken = obj["accessToken"];
+        const refreshToken = obj["refreshToken"];
+        const expiresAt = obj["expiresAt"];
+        if (typeof accessToken !== "string" ||
+            typeof refreshToken !== "string" ||
+            !accessToken.startsWith("sk-ant-")) {
+            return null;
+        }
+        const scopes = Array.isArray(obj["scopes"])
+            ? obj["scopes"]
+            : ["user:inference", "user:profile"];
+        let expiresAtMs;
+        if (typeof expiresAt === "number") {
+            expiresAtMs = expiresAt;
+        }
+        else if (typeof expiresAt === "string") {
+            expiresAtMs = new Date(expiresAt).getTime();
+        }
+        else {
+            // No expiry info — assume 8h from now (standard OAuth token lifetime)
+            expiresAtMs = Date.now() + 8 * 60 * 60 * 1000;
+        }
+        return { accessToken, refreshToken, expiresAt: expiresAtMs, scopes };
+    }
+    catch {
+        return null;
+    }
+}
+/** Format a token expiry timestamp as a human-readable string */
+export function formatExpiry(expiresAtMs) {
+    const ms = expiresAtMs - Date.now();
+    if (ms <= 0)
+        return "EXPIRED";
+    const h = Math.floor(ms / 3_600_000);
+    const m = Math.floor((ms % 3_600_000) / 60_000);
+    return h > 0 ? `${h}h ${m}m` : `${m}m`;
+}
+/** Redact a token for safe display: show first 20 chars + "..." */
+export function redactToken(token) {
+    return token.length > 20 ? `${token.slice(0, 20)}...` : token;
+}

package/dist/utils/token-validator.js

@@ -0,0 +1,24 @@
+export async function validateToken(accessToken) {
+    try {
+        const res = await fetch("https://api.anthropic.com/v1/models", {
+            headers: {
+                "Authorization": `Bearer ${accessToken}`,
+                "anthropic-version": "2023-06-01",
+            },
+        });
+        if (res.ok)
+            return { valid: true };
+        if (res.status === 401) {
+            return { valid: false, reason: "Token invalid or expired (401)" };
+        }
+        if (res.status === 403) {
+            return { valid: false, reason: "Token lacks required scopes (403) — needs user:inference" };
+        }
+        // Any other non-ok status is unexpected but the token may still work
+        return { valid: false, reason: `Unexpected HTTP ${res.status}` };
+    }
+    catch (err) {
+        // Network error — can't validate, let user decide
+        return { valid: false, reason: `Network error: ${err.message}` };
+    }
+}

package/docker-compose.yml

@@ -0,0 +1,45 @@
+services:
+  cc-router:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    ports:
+      - "${PORT:-3456}:3456"
+    volumes:
+      # Mount accounts.json read-write: cc-router must update it when tokens rotate
+      - ${HOME}/.cc-router/accounts.json:/app/accounts.json
+    environment:
+      - PORT=3456
+      - LITELLM_URL=http://litellm:4000
+      - ACCOUNTS_PATH=/app/accounts.json
+      - NODE_ENV=production
+    depends_on:
+      litellm:
+        condition: service_healthy
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "node -e \"fetch('http://localhost:3456/cc-router/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))\""]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+
+  litellm:
+    # Pin a specific version — avoid main-latest for production.
+    # Check releases: https://github.com/BerriAI/litellm/releases
+    # WARNING: versions 1.82.7 and 1.82.8 contained malware — never use them.
+    image: ghcr.io/berriai/litellm:main-stable
+    ports:
+      - "${LITELLM_PORT:-4000}:4000"
+    volumes:
+      - ./litellm-config.yaml:/app/config.yaml:ro
+    environment:
+      - LITELLM_MASTER_KEY=${LITELLM_MASTER_KEY:-cc-router-local-dev}
+    command: ["--config", "/app/config.yaml", "--port", "4000", "--detailed_debug"]
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:4000/health || exit 1"]
+      interval: 15s
+      timeout: 5s
+      retries: 5
+      start_period: 20s

package/litellm-config.yaml

@@ -0,0 +1,44 @@
+model_list:
+  # ── Claude 4.6 (latest) ───────────────────────────────────────────────────
+  - model_name: claude-opus-4-6
+    litellm_params:
+      model: anthropic/claude-opus-4-6
+      # No api_key — Authorization header is injected by cc-router (OAuth token)
+
+  - model_name: claude-sonnet-4-6
+    litellm_params:
+      model: anthropic/claude-sonnet-4-6
+
+  # ── Claude 4.5 ────────────────────────────────────────────────────────────
+  - model_name: claude-sonnet-4-5-20250929
+    litellm_params:
+      model: anthropic/claude-sonnet-4-5-20250929
+
+  - model_name: claude-haiku-4-5-20251001
+    litellm_params:
+      model: anthropic/claude-haiku-4-5-20251001
+
+  # ── Short-name aliases (Claude Code uses these interchangeably) ───────────
+  - model_name: claude-sonnet-4-5
+    litellm_params:
+      model: anthropic/claude-sonnet-4-5-20250929
+
+  - model_name: claude-haiku-4-5
+    litellm_params:
+      model: anthropic/claude-haiku-4-5-20251001
+
+general_settings:
+  # CRITICAL: forward the Authorization header from cc-router to Anthropic.
+  # cc-router injects "Authorization: Bearer <oauth-token>" on every request.
+  # Without this setting, LiteLLM would strip it and auth would fail.
+  forward_client_headers_to_llm_api: true
+
+  # Master key for LiteLLM UI and virtual key management.
+  # Set LITELLM_MASTER_KEY in your environment or .env file.
+  master_key: os.environ/LITELLM_MASTER_KEY
+
+litellm_settings:
+  # High timeouts for Claude Code long-running requests (thinking, agents)
+  request_timeout: 300
+  # Drop params not supported by a model silently (avoids errors on older models)
+  drop_params: true

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "ai-cc-router",
+  "version": "0.1.0",
+  "description": "Round-robin proxy for Claude Max OAuth tokens — use multiple Claude Max accounts with Claude Code",
+  "type": "module",
+  "bin": {
+    "cc-router": "dist/cli/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/cli/index.ts",
+    "start": "node dist/cli/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit"
+  },
+  "keywords": [
+    "claude",
+    "anthropic",
+    "proxy",
+    "oauth",
+    "round-robin",
+    "claude-code",
+    "claude-max"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/VictorMinemu/CC-Router.git"
+  },
+  "bugs": {
+    "url": "https://github.com/VictorMinemu/CC-Router/issues"
+  },
+  "homepage": "https://github.com/VictorMinemu/CC-Router#readme",
+  "files": [
+    "dist/",
+    "litellm-config.yaml",
+    "docker-compose.yml",
+    "Dockerfile",
+    "accounts.example.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@inquirer/prompts": "^7.0.0",
+    "chalk": "^5.3.0",
+    "commander": "^12.0.0",
+    "express": "^4.21.0",
+    "http-proxy-middleware": "^3.0.5",
+    "ink": "^5.0.0",
+    "react": "^18.3.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.0.0",
+    "@types/react": "^18.3.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0",
+    "vitest": "^4.1.2"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}