ai-zero-token 1.0.3 → 1.0.5

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 1.0.5 - 2026-04-27
+
+- Added management-page proxy configuration for upstream requests, persisted in local settings.
+- Routed upstream requests through configured curl proxy settings when enabled.
+- Removed the local fixed-size allowlist for image generation `size`, allowing upstream validation to decide supported values.
+- Documented the proxy configuration workflow without including a specific proxy address.
+
+## 1.0.4 - 2026-04-24
+
+- Moved persistent account and settings state to the user home directory at `~/.ai-zero-token/.state`.
+- Added automatic one-time migration from the old package-local `.state` directory when available.
+- Added `AI_ZERO_TOKEN_HOME` support for overriding the persistent state location.
+- Fixed repeated login prompts after npm upgrades or global package reinstalls.
+
 ## 1.0.3 - 2026-04-24
 
 - Added dynamic Codex model discovery from the local `~/.codex/models_cache.json` cache, with static model fallback when the cache is unavailable.
@@ -11,4 +25,3 @@
 - Improved image generation error handling with transient retries and clearer failure details.
 - Preserved response headers when using the curl HTTP fallback so quota metadata can still be captured.
 - Added Vibe Coding / OpenAI-compatible client integration documentation.
-

package/README.md

@@ -227,6 +227,8 @@ azt start
 
 管理页里邮箱默认脱敏显示，需要手动点击“查看邮箱”才会显示明文。
 
+如果当前网络访问海外上游不稳定，可以在管理页的“接口测试 / 系统设置”区域启用“上游代理”，并填写你自己的代理地址。保存后，OAuth 换取 token、模型刷新和接口转发都会通过该代理访问上游；本地管理页和 `127.0.0.1` 默认保持直连。
+
 默认监听地址：
 
 ```text

package/dist/core/providers/http-client.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { spawn } from "node:child_process";
+import { loadSettings } from "../store/settings-store.js";
 const CURL_STATUS_MARKER = "\n__CURL_STATUS__:";
 const CURL_HEADERS_MARKER = "\n__CURL_HEADERS__:";
 let requestSequence = 0;
@@ -68,6 +69,12 @@ async function runCurlRequest(init, params) {
     "--write-out",
     `${CURL_STATUS_MARKER}%{http_code}${CURL_HEADERS_MARKER}%{header_json}`
   ];
+  if (params?.proxy?.enabled && params.proxy.url.trim()) {
+    args.push("--proxy", params.proxy.url.trim());
+    if (params.proxy.noProxy.trim()) {
+      args.push("--noproxy", params.proxy.noProxy.trim());
+    }
+  }
   for (const [key, value] of Object.entries(init.headers ?? {})) {
     args.push("--header", `${key}: ${value}`);
   }
@@ -148,12 +155,25 @@ async function runCurlRequest(init, params) {
     headers
   };
 }
+async function loadNetworkProxySettings() {
+  try {
+    const settings = await loadSettings();
+    return settings.networkProxy;
+  } catch (error) {
+    console.warn("[http] failed to load network proxy settings", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return void 0;
+  }
+}
 async function requestText(init) {
   const requestId = nextRequestId();
+  const proxy = await loadNetworkProxySettings();
   const useCurlOnly = process.env.OAUTH_DEMO_USE_CURL === "1";
+  const useConfiguredProxy = !!proxy?.enabled && !!proxy.url.trim();
   const timeoutMs = init.timeoutMs;
   const signal = typeof timeoutMs === "number" && Number.isFinite(timeoutMs) && timeoutMs > 0 ? AbortSignal.timeout(timeoutMs) : void 0;
-  if (!useCurlOnly) {
+  if (!useCurlOnly && !useConfiguredProxy) {
     const startedAt = performance.now();
     const phases = {};
     try {
@@ -199,7 +219,8 @@ async function requestText(init) {
   }
   return runCurlRequest(init, {
     requestId,
-    fallbackFrom: useCurlOnly ? void 0 : "fetch"
+    fallbackFrom: useCurlOnly || useConfiguredProxy ? void 0 : "fetch",
+    proxy
   });
 }
 export {

package/dist/core/services/config-service.js

@@ -41,6 +41,36 @@ class ConfigService {
     await saveSettings(next);
     return next;
   }
+  async setNetworkProxy(params) {
+    const url = params.url?.trim() ?? "";
+    const noProxy = params.noProxy?.trim() || "localhost,127.0.0.1,::1";
+    if (params.enabled) {
+      if (!url) {
+        throw new Error("\u542F\u7528\u4EE3\u7406\u65F6\u5FC5\u987B\u586B\u5199\u4EE3\u7406\u5730\u5740\u3002");
+      }
+      let parsed;
+      try {
+        parsed = new URL(url);
+      } catch {
+        throw new Error("\u4EE3\u7406\u5730\u5740\u683C\u5F0F\u9519\u8BEF\uFF0C\u8BF7\u586B\u5199\u5B8C\u6574\u7684\u4EE3\u7406 URL\u3002");
+      }
+      const supportedProtocols = /* @__PURE__ */ new Set(["http:", "https:", "socks4:", "socks4a:", "socks5:", "socks5h:"]);
+      if (!supportedProtocols.has(parsed.protocol)) {
+        throw new Error("\u4EE3\u7406\u5730\u5740\u4EC5\u652F\u6301 http\u3001https\u3001socks4\u3001socks4a\u3001socks5 \u6216 socks5h\u3002");
+      }
+    }
+    const settings = await this.getSettings();
+    const next = {
+      ...settings,
+      networkProxy: {
+        enabled: params.enabled,
+        url,
+        noProxy
+      }
+    };
+    await saveSettings(next);
+    return next;
+  }
   async getServerConfig() {
     const settings = await this.getSettings();
     return settings.server;

package/dist/core/services/image-service.js

@@ -6,11 +6,6 @@ const SUPPORTED_IMAGE_MODELS = /* @__PURE__ */ new Set([
   "gpt-image-1.5",
   "gpt-image-2"
 ]);
-const SUPPORTED_IMAGE_SIZES = /* @__PURE__ */ new Set([
-  "1024x1024",
-  "1024x1536",
-  "1536x1024"
-]);
 const SUPPORTED_IMAGE_QUALITIES = /* @__PURE__ */ new Set([
   "low",
   "medium",
@@ -62,11 +57,11 @@ function toImageGenerationEventOutput(value) {
   return null;
 }
 function normalizeReturnedSize(size, fallback) {
-  if (typeof size === "string" && SUPPORTED_IMAGE_SIZES.has(size)) {
-    return size;
+  if (typeof size === "string" && size.trim()) {
+    return size.trim();
   }
-  if (typeof fallback === "string" && SUPPORTED_IMAGE_SIZES.has(fallback)) {
-    return fallback;
+  if (typeof fallback === "string" && fallback.trim()) {
+    return fallback.trim();
   }
   return void 0;
 }

package/dist/core/store/profile-store.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import fs from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-const projectDir = path.dirname(fileURLToPath(new URL("../../../package.json", import.meta.url)));
-const stateDir = path.join(projectDir, ".state");
-const storePath = path.join(stateDir, "store.json");
+import {
+  ensureStateMigrated,
+  getStateDir,
+  getStorePath
+} from "./state-paths.js";
 const PROFILE_CLAIM_PATH = "https://api.openai.com/profile";
 function createEmptyStore() {
   return {
@@ -40,15 +40,10 @@ function extractEmailFromAccessToken(token) {
   }
   return void 0;
 }
-function getStateDir() {
-  return stateDir;
-}
-function getStorePath() {
-  return storePath;
-}
 async function loadStore() {
   try {
-    const raw = await fs.readFile(storePath, "utf8");
+    await ensureStateMigrated();
+    const raw = await fs.readFile(getStorePath(), "utf8");
     const parsed = JSON.parse(raw);
     const normalizedProfiles = Object.fromEntries(
       Object.entries(parsed.profiles ?? {}).map(([profileId, profile]) => [
@@ -73,8 +68,9 @@ async function loadStore() {
   }
 }
 async function saveStore(store) {
-  await fs.mkdir(stateDir, { recursive: true });
-  await fs.writeFile(storePath, `${JSON.stringify(store, null, 2)}
+  await ensureStateMigrated();
+  await fs.mkdir(getStateDir(), { recursive: true });
+  await fs.writeFile(getStorePath(), `${JSON.stringify(store, null, 2)}
 `, "utf8");
 }
 async function saveProfile(profile) {
@@ -130,7 +126,7 @@ async function removeProfile(profileId) {
   return store.activeProfileId ? store.profiles[store.activeProfileId] ?? null : null;
 }
 async function clearStore() {
-  await fs.rm(stateDir, { recursive: true, force: true });
+  await fs.rm(getStateDir(), { recursive: true, force: true });
 }
 export {
   clearStore,

package/dist/core/store/settings-store.js

@@ -1,33 +1,41 @@
 #!/usr/bin/env node
 import fs from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-const projectDir = path.dirname(fileURLToPath(new URL("../../../package.json", import.meta.url)));
-const stateDir = path.join(projectDir, ".state");
-const settingsPath = path.join(stateDir, "settings.json");
+import {
+  ensureStateMigrated,
+  getSettingsPath,
+  getStateDir
+} from "./state-paths.js";
 function createDefaultSettings() {
   return {
     version: 1,
     defaultProvider: "openai-codex",
     defaultModel: "gpt-5.4",
+    networkProxy: {
+      enabled: false,
+      url: "",
+      noProxy: "localhost,127.0.0.1,::1"
+    },
     server: {
       host: "0.0.0.0",
       port: 8787
     }
   };
 }
-function getSettingsPath() {
-  return settingsPath;
-}
 async function loadSettings() {
   try {
-    const raw = await fs.readFile(settingsPath, "utf8");
+    await ensureStateMigrated();
+    const raw = await fs.readFile(getSettingsPath(), "utf8");
     const parsed = JSON.parse(raw);
     const defaults = createDefaultSettings();
     return {
       version: 1,
       defaultProvider: parsed.defaultProvider ?? defaults.defaultProvider,
       defaultModel: parsed.defaultModel ?? defaults.defaultModel,
+      networkProxy: {
+        enabled: parsed.networkProxy?.enabled ?? defaults.networkProxy.enabled,
+        url: parsed.networkProxy?.url ?? defaults.networkProxy.url,
+        noProxy: parsed.networkProxy?.noProxy ?? defaults.networkProxy.noProxy
+      },
       server: {
         host: parsed.server?.host ?? defaults.server.host,
         port: parsed.server?.port ?? defaults.server.port
@@ -38,8 +46,9 @@ async function loadSettings() {
   }
 }
 async function saveSettings(settings) {
-  await fs.mkdir(stateDir, { recursive: true });
-  await fs.writeFile(settingsPath, `${JSON.stringify(settings, null, 2)}
+  await ensureStateMigrated();
+  await fs.mkdir(getStateDir(), { recursive: true });
+  await fs.writeFile(getSettingsPath(), `${JSON.stringify(settings, null, 2)}
 `, "utf8");
 }
 export {

package/dist/core/store/state-paths.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const packageDir = path.dirname(fileURLToPath(new URL("../../../package.json", import.meta.url)));
+const legacyStateDir = path.join(packageDir, ".state");
+const appHomeDir = process.env.AI_ZERO_TOKEN_HOME || path.join(os.homedir(), ".ai-zero-token");
+const stateDir = path.join(appHomeDir, ".state");
+let migrationPromise = null;
+async function pathExists(targetPath) {
+  try {
+    await fs.access(targetPath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function copyIfMissing(fileName) {
+  const legacyPath = path.join(legacyStateDir, fileName);
+  const nextPath = path.join(stateDir, fileName);
+  if (!await pathExists(legacyPath) || await pathExists(nextPath)) {
+    return;
+  }
+  await fs.mkdir(stateDir, { recursive: true });
+  await fs.copyFile(legacyPath, nextPath);
+}
+function getStateDir() {
+  return stateDir;
+}
+function getStorePath() {
+  return path.join(stateDir, "store.json");
+}
+function getSettingsPath() {
+  return path.join(stateDir, "settings.json");
+}
+async function ensureStateMigrated() {
+  if (!migrationPromise) {
+    migrationPromise = (async () => {
+      if (legacyStateDir === stateDir) {
+        return;
+      }
+      await copyIfMissing("store.json");
+      await copyIfMissing("settings.json");
+    })();
+  }
+  await migrationPromise;
+}
+export {
+  ensureStateMigrated,
+  getSettingsPath,
+  getStateDir,
+  getStorePath
+};

package/dist/server/admin-page.js

@@ -990,6 +990,21 @@ function renderAdminPage() {
       color: var(--text-soft);
     }
 
+    .checkbox-row {
+      display: flex;
+      align-items: center;
+      gap: 10px;
+      color: var(--text-soft);
+      font-size: 13px;
+      font-weight: 600;
+    }
+
+    .checkbox-row input {
+      width: 16px;
+      height: 16px;
+      accent-color: var(--brand);
+    }
+
     .pre {
       margin: 0;
       padding: 14px;
@@ -1465,6 +1480,21 @@ function renderAdminPage() {
               </div>
             </div>
 
+            <div class="field">
+              <label class="checkbox-row" for="proxyEnabled">
+                <input id="proxyEnabled" type="checkbox" />
+                \u542F\u7528\u4E0A\u6E38\u4EE3\u7406
+              </label>
+              <label for="proxyUrl">\u4EE3\u7406\u5730\u5740</label>
+              <input class="input" id="proxyUrl" type="text" placeholder="\u586B\u5199\u4F60\u7684\u4EE3\u7406\u5730\u5740" />
+              <label for="proxyNoProxy">\u76F4\u8FDE\u5730\u5740</label>
+              <input class="input" id="proxyNoProxy" type="text" placeholder="localhost,127.0.0.1,::1" />
+              <p class="hint">\u542F\u7528\u540E\uFF0COAuth \u6362\u53D6 token\u3001\u6A21\u578B\u5237\u65B0\u548C\u63A5\u53E3\u8F6C\u53D1\u4F1A\u901A\u8FC7\u6B64\u4EE3\u7406\u8BBF\u95EE\u6D77\u5916\u4E0A\u6E38\u3002</p>
+              <div class="actions">
+                <button class="btn-primary" id="saveProxyBtn" type="button">\u4FDD\u5B58\u4EE3\u7406\u914D\u7F6E</button>
+              </div>
+            </div>
+
             <div class="field">
               <label for="requestBody">\u8BF7\u6C42\u4F53 JSON</label>
               <textarea class="textarea" id="requestBody" spellcheck="false"></textarea>
@@ -1638,6 +1668,9 @@ function renderAdminPage() {
     const profileSearch = document.getElementById("profileSearch");
     const profileStatusFilter = document.getElementById("profileStatusFilter");
     const profileSort = document.getElementById("profileSort");
+    const proxyEnabled = document.getElementById("proxyEnabled");
+    const proxyUrl = document.getElementById("proxyUrl");
+    const proxyNoProxy = document.getElementById("proxyNoProxy");
 
     function setBusy(button, busy) {
       if (button) {
@@ -2567,6 +2600,7 @@ function renderAdminPage() {
         ["Base URL", config.baseUrl],
         ["Provider", config.status.activeProvider || "openai-codex"],
         ["\u9ED8\u8BA4\u6A21\u578B", config.settings.defaultModel],
+        ["\u4E0A\u6E38\u4EE3\u7406", config.settings.networkProxy && config.settings.networkProxy.enabled ? "\u5DF2\u542F\u7528" : "\u672A\u542F\u7528"],
         ["\u5F53\u524D\u7248\u672C", getVersionValue(config)],
         ["\u5F53\u524D\u5957\u9910", config.profile ? getPlanType(config.profile) : "\u672A\u767B\u5F55"],
         ["\u751F\u56FE\u80FD\u529B", getImageCapability(config.profile).detail],
@@ -2585,6 +2619,7 @@ function renderAdminPage() {
         ["API Base URL", config.baseUrl],
         ["\u5F53\u524D\u8D26\u53F7", getProfileDisplayLabel(config.profile)],
         ["\u9ED8\u8BA4\u6A21\u578B", config.settings.defaultModel],
+        ["\u4E0A\u6E38\u4EE3\u7406", config.settings.networkProxy && config.settings.networkProxy.enabled ? config.settings.networkProxy.url : "\u672A\u542F\u7528"],
         ["\u7248\u672C\u72B6\u6001", getVersionDetail(config)],
         ["\u5F53\u524D\u5957\u9910", config.profile ? getPlanType(config.profile) : "\u672A\u767B\u5F55"],
         ["\u751F\u56FE\u80FD\u529B", getImageCapability(config.profile).detail],
@@ -2640,6 +2675,17 @@ function renderAdminPage() {
       hint.textContent = parts.join("\uFF0C") + "\u3002";
     }
 
+    function renderProxySettings(config) {
+      const proxy = config.settings.networkProxy || {
+        enabled: false,
+        url: "",
+        noProxy: "localhost,127.0.0.1,::1",
+      };
+      proxyEnabled.checked = !!proxy.enabled;
+      proxyUrl.value = proxy.url || "";
+      proxyNoProxy.value = proxy.noProxy || "localhost,127.0.0.1,::1";
+    }
+
     function syncHero(config) {
       const profileText = config.profile
         ? "\u5F53\u524D\u8D26\u53F7\u4E3A " + getProfileDisplayLabel(config.profile) + "\uFF0C\u5957\u9910 " + getPlanType(config.profile) + "\uFF0C\u53EF\u5728\u53F3\u4FA7\u5B8C\u6210\u6A21\u578B\u5207\u6362\u548C\u63A5\u53E3\u8C03\u8BD5\u3002"
@@ -2676,6 +2722,7 @@ function renderAdminPage() {
       renderProfiles(config);
       renderModelOptions(config);
       renderModelCatalogStatus(config);
+      renderProxySettings(config);
       renderUpdatePanel(config);
       renderEndpoints(config);
       renderServiceInfo(config);
@@ -2880,6 +2927,33 @@ function renderAdminPage() {
       }
     }
 
+    async function saveProxy() {
+      const button = document.getElementById("saveProxyBtn");
+      setBusy(button, true);
+      authStatus.textContent = "\u6B63\u5728\u4FDD\u5B58\u4EE3\u7406\u914D\u7F6E...";
+      try {
+        const config = await fetchJson("/_gateway/admin/settings", {
+          method: "PUT",
+          headers: {
+            "Content-Type": "application/json",
+          },
+          body: formatJson({
+            networkProxy: {
+              enabled: proxyEnabled.checked,
+              url: proxyUrl.value,
+              noProxy: proxyNoProxy.value,
+            },
+          }),
+        });
+        renderConfig(config);
+        authStatus.textContent = proxyEnabled.checked ? "\u4EE3\u7406\u914D\u7F6E\u5DF2\u542F\u7528\u3002" : "\u4EE3\u7406\u914D\u7F6E\u5DF2\u5173\u95ED\u3002";
+      } catch (error) {
+        authStatus.textContent = error.message;
+      } finally {
+        setBusy(button, false);
+      }
+    }
+
     async function refreshModels() {
       const button = document.getElementById("refreshModelsBtn");
       setBusy(button, true);
@@ -3034,6 +3108,7 @@ function renderAdminPage() {
     document.getElementById("closeImagePreviewBtn").addEventListener("click", closeImagePreviewModal);
     document.getElementById("refreshModelsBtn").addEventListener("click", refreshModels);
     document.getElementById("saveModelBtn").addEventListener("click", saveModel);
+    document.getElementById("saveProxyBtn").addEventListener("click", saveProxy);
     runTestBtn.addEventListener("click", runTest);
     document.querySelectorAll("[data-result-tab]").forEach(function (button) {
       button.addEventListener("click", function () {

package/dist/server/app.js

@@ -67,7 +67,12 @@ const chatCompletionsBodySchema = z.object({
   user: z.string().optional()
 }).passthrough();
 const settingsUpdateSchema = z.object({
-  defaultModel: z.string().min(1)
+  defaultModel: z.string().min(1).optional(),
+  networkProxy: z.object({
+    enabled: z.boolean(),
+    url: z.string().optional(),
+    noProxy: z.string().optional()
+  }).optional()
 });
 const profileActionSchema = z.object({
   profileId: z.string().min(1)
@@ -77,7 +82,7 @@ const imageGenerationsBodySchema = z.object({
   model: z.string().optional(),
   n: z.number().int().positive().optional(),
   quality: z.enum(["low", "medium", "high", "auto"]).optional(),
-  size: z.enum(["1024x1024", "1024x1536", "1536x1024", "auto"]).optional(),
+  size: z.string().min(1).optional(),
   background: z.enum(["transparent", "opaque", "auto"]).optional(),
   output_format: z.enum(["png", "webp", "jpeg"]).optional(),
   output_compression: z.number().int().min(0).max(100).optional(),
@@ -473,7 +478,12 @@ function createApp(params) {
         }
       };
     }
-    await ctx.configService.setDefaultModel(parsed.data.defaultModel);
+    if (parsed.data.defaultModel) {
+      await ctx.configService.setDefaultModel(parsed.data.defaultModel);
+    }
+    if (parsed.data.networkProxy) {
+      await ctx.configService.setNetworkProxy(parsed.data.networkProxy);
+    }
     return buildAdminConfig(request);
   });
   app.get("/v1/models", async () => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-zero-token",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Local-first OpenAI-compatible AI CLI and gateway with Codex OAuth, multi-account management, and gpt-image-2 image generation.",
   "license": "MIT",
   "type": "module",