ai-cc-router 0.2.1 → 0.2.2

package/dist/interceptor/mitmproxy-manager.js

@@ -136,7 +136,7 @@ export function writeAddonScript(target) {
         writeFileSync(ADDON_PATH, src, "utf-8");
     }
     else {
-        // Inline fallback — minimal addon
+        // Inline fallback — minimal addon (only redirects /v1/messages and /v1/models)
         const script = `
 import os
 from mitmproxy import http
@@ -144,10 +144,13 @@ from urllib.parse import urlparse
 
 _target = os.environ.get("CC_ROUTER_TARGET", ${JSON.stringify(target)}).rstrip("/")
 _p = urlparse(_target)
+_REDIRECT_PREFIXES = ("/v1/messages", "/v1/models")
 
 def request(flow: http.HTTPFlow) -> None:
     if flow.request.pretty_host != "api.anthropic.com":
         return
+    if not flow.request.path.startswith(_REDIRECT_PREFIXES):
+        return
     flow.request.scheme = _p.scheme
     flow.request.host = _p.hostname or "localhost"
     flow.request.port = _p.port or (443 if _p.scheme == "https" else 80)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-cc-router",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Round-robin proxy for Claude Max OAuth tokens — use multiple Claude Max accounts with Claude Code",
   "type": "module",
   "bin": {

package/src/interceptor/addon.py

@@ -1,11 +1,16 @@
-# mitmproxy addon — redirects api.anthropic.com traffic to CC-Router.
+# mitmproxy addon — redirects ONLY /v1/messages traffic to CC-Router.
 #
-# Installed and launched by `cc-router client start-desktop`.
-# Target URL comes from the CC_ROUTER_TARGET env var (set by the launcher).
+# Claude Desktop sends many types of requests to api.anthropic.com:
+#   /v1/messages         → LLM inference (this is what we redirect)
+#   /v1/messages/count_tokens → token counting (redirect too)
+#   /v1/oauth/*          → session auth (must NOT redirect)
+#   /v1/environments/*   → bridge/cowork (must NOT redirect)
+#   /v1/models           → model listing (redirect — CC-Router proxies this)
+#   /api/*               → desktop features (must NOT redirect)
 #
-# Why not set the target as a script argument: mitmproxy's addon loader
-# does not pass argv through reliably, and env vars give us a single
-# unambiguous channel that survives the spawn boundary.
+# Only /v1/messages* and /v1/models are safe to redirect because CC-Router
+# injects its own OAuth token. Everything else carries the user's own
+# session token for features CC-Router doesn't handle.
 
 import os
 from urllib.parse import urlparse
@@ -16,22 +21,27 @@ _target_raw = os.environ.get("CC_ROUTER_TARGET", "http://localhost:3456")
 _target = _target_raw.rstrip("/")
 _target_parsed = urlparse(_target)
 
-# Fail closed on boot if the target is unusable — better than silently
-# forwarding to a broken URL and seeing Claude Desktop timeout.
 if not _target_parsed.scheme or not _target_parsed.netloc:
     raise RuntimeError(f"CC_ROUTER_TARGET is not a valid URL: {_target_raw!r}")
 
+# Paths that CC-Router can handle (it injects its own OAuth token)
+_REDIRECT_PREFIXES = (
+    "/v1/messages",
+    "/v1/models",
+)
+
 
 def request(flow: http.HTTPFlow) -> None:
     if flow.request.pretty_host != "api.anthropic.com":
         return
 
-    # Preserve path + query (e.g. /v1/messages?beta=oauth-2025-04-20)
-    # and swap only the scheme + host.
+    # Only redirect inference and model-listing paths
+    if not flow.request.path.startswith(_REDIRECT_PREFIXES):
+        return
+
     flow.request.scheme = _target_parsed.scheme
     flow.request.host = _target_parsed.hostname or "localhost"
     flow.request.port = _target_parsed.port or (443 if _target_parsed.scheme == "https" else 80)
-    # Rewrite the Host header so CC-Router sees itself, not api.anthropic.com.
     flow.request.headers["host"] = flow.request.host + (
         f":{flow.request.port}"
         if flow.request.port not in (80, 443)