anypick 1.0.0

package/dist/core/proxy-hub-server.js

@@ -0,0 +1,409 @@
+import { assertLoopbackHost } from "../utils/network.js";
+import { displayRef, serializeRef } from "./refs.js";
+import { sanitizeInferenceToolSchemas } from "../providers/protocol/json-schema.js";
+import { estimateAnthropicInputTokens } from "../providers/protocol/token-estimate.js";
+import { normalizeLocalApiUrl } from "../providers/proxy-shared.js";
+import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+//#region src/core/proxy-hub-server.ts
+var MAX_REQUEST_BYTES = 10 * 1024 * 1024;
+var HOP_BY_HOP = /* @__PURE__ */ new Set([
+	"connection",
+	"keep-alive",
+	"proxy-authenticate",
+	"proxy-authorization",
+	"te",
+	"trailer",
+	"transfer-encoding",
+	"upgrade",
+	"content-encoding",
+	"content-length"
+]);
+/** Shared provider-owned backend cache for the Hub runtime and catalog refresh. */
+var ProxyHubBackendRegistry = class {
+	deps;
+	log;
+	backends = /* @__PURE__ */ new Map();
+	constructor(deps, log) {
+		this.deps = deps;
+		this.log = log;
+	}
+	async open(source) {
+		const sourceId = serializeRef(source);
+		const existing = this.backends.get(sourceId);
+		if (existing) return existing;
+		const accounts = await this.accountsFor(source);
+		const provider = this.deps.accountRegistry.get(source.provider);
+		if (!provider.createProxyHubBackend) throw new Error(`${provider.name} does not support Proxy Hub`);
+		const token = randomBytes(32).toString("hex");
+		const entry = {
+			token,
+			handle: await provider.createProxyHubBackend({
+				source,
+				accounts,
+				token,
+				log: (line) => this.log(`[${displayRef(source)}] ${line}`)
+			})
+		};
+		this.backends.set(sourceId, entry);
+		return entry;
+	}
+	async close() {
+		await Promise.allSettled([...this.backends.values()].map((entry) => entry.handle.close()));
+		this.backends.clear();
+	}
+	async accountsFor(source) {
+		if (source.kind === "account") {
+			const account = await this.deps.accounts.get(source.provider, source.name);
+			if (!account) throw new Error(`Proxy Hub source ${displayRef(source)} does not exist`);
+			return [{
+				name: account.meta.name,
+				snapshotDir: account.snapshotDir,
+				proxy: account.proxy
+			}];
+		}
+		const pool = await this.deps.pools.get(source.provider);
+		if (!pool || pool.mode !== "multi") throw new Error(`Proxy Hub source ${displayRef(source)} is not an enabled multi-account pool`);
+		const resolved = (await Promise.all(pool.members.filter((member) => member.enabled).map((member) => this.deps.accounts.get(source.provider, member.account)))).filter((account) => account != null);
+		if (resolved.length === 0) throw new Error(`Proxy Hub source ${displayRef(source)} has no saved accounts`);
+		return resolved.map((account) => ({
+			name: account.meta.name,
+			snapshotDir: account.snapshotDir,
+			proxy: account.proxy
+		}));
+	}
+};
+/**
+* The single public listener. Provider servers run as private loopback
+* backends in this same process; their per-backend token is never exposed to a
+* client. This keeps provider protocol code provider-owned while eliminating
+* the user-visible endpoint/process fan-out.
+*/
+var ProxyHubServer = class {
+	deps;
+	opts;
+	instanceId;
+	backends;
+	closed = false;
+	log;
+	server;
+	constructor(deps, opts) {
+		this.deps = deps;
+		this.opts = opts;
+		assertLoopbackHost(opts.host);
+		this.instanceId = opts.instanceId ?? randomUUID();
+		this.log = opts.log ?? (() => {});
+		this.backends = new ProxyHubBackendRegistry(deps, this.log);
+		this.server = createServer((req, res) => {
+			this.handle(req, res).catch((error) => this.fail(res, error));
+		});
+	}
+	async listen() {
+		await new Promise((resolve, reject) => {
+			this.server.once("error", reject);
+			this.server.listen(this.opts.port, this.opts.host, () => resolve());
+		});
+		const address = this.server.address();
+		if (!address || typeof address === "string") throw new Error("Proxy Hub did not bind a TCP listener");
+		return {
+			endpoint: `http://${this.opts.host}:${address.port}`,
+			port: address.port
+		};
+	}
+	async close() {
+		if (this.closed) return;
+		this.closed = true;
+		this.server.closeIdleConnections?.();
+		await Promise.allSettled([this.backends.close()]);
+		await new Promise((resolve) => {
+			const force = setTimeout(() => {
+				this.server.closeAllConnections?.();
+				resolve();
+			}, 1500);
+			force.unref?.();
+			this.server.close((error) => {
+				clearTimeout(force);
+				if (error && error.code !== "ERR_SERVER_NOT_RUNNING") {}
+				resolve();
+			});
+		});
+		this.server.closeAllConnections?.();
+	}
+	async handle(req, res) {
+		const url = new URL(normalizeLocalApiUrl(req.url ?? "/"), `http://${this.opts.host}`);
+		const path = url.pathname;
+		const method = req.method ?? "GET";
+		if ((method === "GET" || method === "HEAD") && (path === "/" || path === "/health")) {
+			this.json(res, 200, {
+				ok: true,
+				service: "anypick-proxy-hub",
+				instanceId: this.instanceId,
+				hub: this.opts.name
+			});
+			return;
+		}
+		if (!path.startsWith("/v1/")) {
+			this.json(res, 404, { error: {
+				type: "not_found_error",
+				message: `Not found: ${path}`
+			} });
+			return;
+		}
+		const route = await this.authenticate(req);
+		if (!route) {
+			this.json(res, 401, { error: {
+				type: "authentication_error",
+				message: "Invalid proxy token"
+			} });
+			return;
+		}
+		if (route.manifest.hub !== this.opts.name) {
+			this.json(res, 403, { error: {
+				type: "permission_error",
+				message: "Route is not valid for this hub"
+			} });
+			return;
+		}
+		if (method === "GET" && path === "/v1/models") {
+			this.json(res, 200, {
+				object: "list",
+				data: route.manifest.routes.map((target) => ({
+					id: target.model,
+					object: "model",
+					owned_by: "anypick"
+				}))
+			});
+			return;
+		}
+		if (method !== "POST") {
+			this.json(res, 405, { error: {
+				type: "invalid_request_error",
+				message: "POST required"
+			} });
+			return;
+		}
+		const request = parseRequest(await readBody(req));
+		if (!request || typeof request.model !== "string" || !request.model.trim()) {
+			this.json(res, 400, { error: {
+				type: "invalid_request_error",
+				message: "model is required"
+			} });
+			return;
+		}
+		const target = route.manifest.routes.find((candidate) => candidate.model === request.model);
+		if (!target) {
+			this.json(res, 400, { error: {
+				type: "invalid_request_error",
+				message: `Model ${request.model} is not available for this proxy route`
+			} });
+			return;
+		}
+		if (path === "/v1/messages/count_tokens") {
+			const inputTokens = estimateAnthropicInputTokens(request);
+			this.log(`count_tokens ${safeLogField(target.model)} → ${inputTokens} (local estimate)`);
+			this.json(res, 200, { input_tokens: inputTokens });
+			return;
+		}
+		request.model = target.upstreamModel;
+		const sanitized = sanitizeInferenceToolSchemas(url.pathname, request);
+		const backend = await this.backends.open(target.source);
+		const startedAt = Date.now();
+		const model = safeLogField(target.model);
+		const source = safeLogField(displayRef(target.source));
+		try {
+			const outcome = await this.forward(req, res, url, Buffer.from(JSON.stringify(sanitized.body)), backend);
+			const elapsed = Date.now() - startedAt;
+			if (outcome === "client-disconnect") this.log(`route ${model} -> ${source} client disconnect ${elapsed}ms`);
+			else this.log(`route ${model} -> ${source} ${res.statusCode} ${elapsed}ms`);
+		} catch (error) {
+			this.log(`route ${model} -> ${source} failed ${Date.now() - startedAt}ms`);
+			throw error;
+		}
+	}
+	async authenticate(req) {
+		const raw = requestToken(req);
+		if (!raw) return null;
+		const routes = this.deps.hubs.listRouteSecrets(this.opts.name);
+		let authenticated = null;
+		for (const candidate of routes) if (sameSecret(raw, candidate.token)) authenticated = candidate;
+		return authenticated;
+	}
+	async forward(req, res, url, body, backend) {
+		const headers = new Headers();
+		for (const [key, value] of Object.entries(req.headers)) {
+			const normalized = key.toLowerCase();
+			if (value === void 0 || HOP_BY_HOP.has(normalized) || normalized === "host" || normalized === "authorization" || normalized === "content-length") continue;
+			headers.set(key, Array.isArray(value) ? value.join(", ") : value);
+		}
+		headers.set("authorization", `Bearer ${backend.token}`);
+		headers.set("content-length", String(body.byteLength));
+		const abort = new AbortController();
+		const markClientGone = () => {
+			if (!abort.signal.aborted) abort.abort(/* @__PURE__ */ new Error("client disconnected"));
+		};
+		const onRequestAbort = () => markClientGone();
+		const onResponseClose = () => {
+			if (!res.writableFinished) markClientGone();
+		};
+		req.once("aborted", onRequestAbort);
+		res.once("close", onResponseClose);
+		try {
+			const upstream = await fetch(`${backend.handle.endpoint}${url.pathname}${url.search}`, {
+				method: req.method,
+				headers,
+				body: new Uint8Array(body),
+				signal: abort.signal,
+				redirect: "manual"
+			});
+			for (const [key, value] of upstream.headers.entries()) if (!HOP_BY_HOP.has(key.toLowerCase())) res.setHeader(key, value);
+			res.statusCode = upstream.status;
+			if (!upstream.body) {
+				res.end();
+				return "ok";
+			}
+			return await pipeWebStreamToResponse(upstream.body, res, abort);
+		} catch (error) {
+			if (isBenignClientClose(error, res, abort.signal)) {
+				if (!res.writableEnded && !res.destroyed) res.end();
+				return "client-disconnect";
+			}
+			throw error;
+		} finally {
+			req.removeListener("aborted", onRequestAbort);
+			res.removeListener("close", onResponseClose);
+		}
+	}
+	json(res, status, body) {
+		const raw = JSON.stringify(body);
+		res.writeHead(status, {
+			"content-type": "application/json; charset=utf-8",
+			"content-length": Buffer.byteLength(raw)
+		});
+		res.end(raw);
+	}
+	fail(res, error) {
+		const message = error instanceof Error ? error.message : String(error);
+		if (isBenignClientClose(error, res, void 0)) {
+			if (!res.writableEnded && !res.destroyed) res.end();
+			return;
+		}
+		this.log(`error ${message}`);
+		if (!res.headersSent) this.json(res, 502, { error: {
+			type: "proxy_error",
+			message: "Proxy Hub backend failed"
+		} });
+		else if (!res.writableEnded) res.end();
+	}
+};
+/**
+* Copy a fetch body onto the client response with backpressure. Returns
+* `client-disconnect` when Claude (or another client) cancels mid-stream —
+* never throws "Premature close" for that case.
+*/
+async function pipeWebStreamToResponse(body, res, abort) {
+	let clientGone = abort.signal.aborted;
+	const onAbort = () => {
+		clientGone = true;
+		body.cancel().catch(() => {});
+	};
+	abort.signal.addEventListener("abort", onAbort, { once: true });
+	const reader = body.getReader();
+	try {
+		while (!clientGone && !res.writableEnded && !res.destroyed) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (!value?.byteLength) continue;
+			if (!res.write(Buffer.from(value))) {
+				if (!await waitForDrain(res)) {
+					clientGone = true;
+					if (!abort.signal.aborted) abort.abort(/* @__PURE__ */ new Error("client disconnected"));
+					reader.cancel().catch(() => {});
+					break;
+				}
+			}
+		}
+		if (!res.writableEnded && !res.destroyed) res.end();
+		return clientGone || abort.signal.aborted ? "client-disconnect" : "ok";
+	} catch (error) {
+		if (clientGone || isBenignClientClose(error, res, abort.signal)) {
+			if (!res.writableEnded && !res.destroyed) res.end();
+			return "client-disconnect";
+		}
+		throw error;
+	} finally {
+		abort.signal.removeEventListener("abort", onAbort);
+		try {
+			reader.releaseLock();
+		} catch {}
+	}
+}
+function waitForDrain(res) {
+	if (res.writableEnded || res.destroyed || res.socket?.destroyed) return Promise.resolve(false);
+	if (!res.writableNeedDrain) return Promise.resolve(true);
+	return new Promise((resolve) => {
+		const done = (ok) => {
+			res.removeListener("drain", onDrain);
+			res.removeListener("close", onFail);
+			res.removeListener("error", onFail);
+			resolve(ok);
+		};
+		const onDrain = () => done(true);
+		const onFail = () => done(false);
+		res.once("drain", onDrain);
+		res.once("close", onFail);
+		res.once("error", onFail);
+	});
+}
+/**
+* fetch throws AbortError when we cancel for a client hang-up. Residual
+* stream errors after the client is gone are also not hub failures.
+*/
+function isBenignClientClose(error, res, signal) {
+	if (signal?.aborted) return true;
+	if (!error || typeof error !== "object") return false;
+	const value = error;
+	if (value.name === "AbortError" || value.code === "ABORT_ERR") return true;
+	if (value.code === "ERR_STREAM_PREMATURE_CLOSE") return true;
+	if (typeof value.message === "string" && (/premature close/i.test(value.message) || /aborted|client disconnected|this operation was aborted|terminated|other side closed/i.test(value.message))) return true;
+	if (Array.isArray(value.errors)) {
+		for (const nested of value.errors) if (isBenignClientClose(nested, res, signal)) return true;
+	}
+	if (res.destroyed || res.writableFinished || res.writableEnded) return typeof value.message === "string" && (/ECONNRESET|EPIPE|socket hang up|write after end|terminated/i.test(value.message) || value.code === "ECONNRESET" || value.code === "EPIPE" || value.code === "UND_ERR_SOCKET");
+	return value.cause ? isBenignClientClose(value.cause, res, signal) : false;
+}
+function safeLogField(value) {
+	return value.replaceAll(/[\r\n\t]/gu, " ").slice(0, 256);
+}
+function requestToken(req) {
+	if (typeof req.headers.authorization !== "string") return null;
+	return /^Bearer\s+(.+)$/iu.exec(req.headers.authorization.trim())?.[1]?.trim() || null;
+}
+function sameSecret(input, expected) {
+	const left = Buffer.from(input);
+	const right = Buffer.from(expected);
+	return left.length === right.length && timingSafeEqual(left, right);
+}
+async function readBody(req) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of req) {
+		const next = typeof chunk === "string" ? new TextEncoder().encode(chunk) : chunk instanceof Uint8Array ? new Uint8Array(chunk) : void 0;
+		if (!next) throw new Error("Proxy Hub received an invalid request body chunk");
+		size += next.byteLength;
+		if (size > MAX_REQUEST_BYTES) throw new Error("Request body exceeds Proxy Hub limit");
+		chunks.push(next);
+	}
+	return Buffer.concat(chunks);
+}
+function parseRequest(body) {
+	try {
+		const parsed = JSON.parse(body.toString("utf8"));
+		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { ProxyHubBackendRegistry, ProxyHubServer };
+
+//# sourceMappingURL=proxy-hub-server.js.map

package/dist/core/proxy-hub-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub-server.js","names":[],"sources":["../../src/core/proxy-hub-server.ts"],"sourcesContent":["import { randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';\nimport type { ProxyHubBackendHandle, ProxyHubSourceRef } from '../types';\nimport { sanitizeInferenceToolSchemas } from '../providers/protocol/json-schema';\nimport { normalizeLocalApiUrl } from '../providers/proxy-shared';\nimport { estimateAnthropicInputTokens } from '../providers/protocol/token-estimate';\nimport { assertLoopbackHost } from '../utils/network';\nimport { displayRef, serializeRef } from './refs';\nimport type { AccountService } from './service';\nimport type { PoolStore } from './pool-store';\nimport type { ProviderRegistry } from './registry';\nimport type { ProxyHubRouteSecret, ProxyHubStore } from './proxy-hub-store';\n\nconst MAX_REQUEST_BYTES = 10 * 1024 * 1024;\nconst HOP_BY_HOP = new Set([\n  'connection',\n  'keep-alive',\n  'proxy-authenticate',\n  'proxy-authorization',\n  'te',\n  'trailer',\n  'transfer-encoding',\n  'upgrade',\n  // Never forward these on the hub→client leg: fetch may have already\n  // decompressed the backend body, and Node will re-chunk the stream.\n  'content-encoding',\n  'content-length',\n]);\n\nexport interface ProxyHubServerDeps {\n  hubs: ProxyHubStore;\n  accounts: AccountService;\n  pools: PoolStore;\n  accountRegistry: ProviderRegistry;\n}\n\nexport interface ProxyHubServerOptions {\n  name: string;\n  host: string;\n  port: number;\n  instanceId?: string;\n  log?: (line: string) => void;\n}\n\nexport interface ProxyHubBackendSession {\n  token: string;\n  handle: ProxyHubBackendHandle;\n}\n\n/** Shared provider-owned backend cache for the Hub runtime and catalog refresh. */\nexport class ProxyHubBackendRegistry {\n  private readonly backends = new Map<string, ProxyHubBackendSession>();\n\n  constructor(\n    private readonly deps: ProxyHubServerDeps,\n    private readonly log: (line: string) => void,\n  ) {}\n\n  async open(source: ProxyHubSourceRef): Promise<ProxyHubBackendSession> {\n    const sourceId = serializeRef(source);\n    const existing = this.backends.get(sourceId);\n    if (existing) {\n      return existing;\n    }\n    const accounts = await this.accountsFor(source);\n    const provider = this.deps.accountRegistry.get(source.provider);\n    if (!provider.createProxyHubBackend) {\n      throw new Error(`${provider.name} does not support Proxy Hub`);\n    }\n    const token = randomBytes(32).toString('hex');\n    const handle = await provider.createProxyHubBackend({\n      source,\n      accounts,\n      token,\n      log: (line) => this.log(`[${displayRef(source)}] ${line}`),\n    });\n    const entry: ProxyHubBackendSession = { token, handle };\n    this.backends.set(sourceId, entry);\n    return entry;\n  }\n\n  async close(): Promise<void> {\n    await Promise.allSettled([...this.backends.values()].map((entry) => entry.handle.close()));\n    this.backends.clear();\n  }\n\n  private async accountsFor(source: ProxyHubSourceRef) {\n    if (source.kind === 'account') {\n      const account = await this.deps.accounts.get(source.provider, source.name);\n      if (!account) {\n        throw new Error(`Proxy Hub source ${displayRef(source)} does not exist`);\n      }\n      return [{ name: account.meta.name, snapshotDir: account.snapshotDir, proxy: account.proxy }];\n    }\n    const pool = await this.deps.pools.get(source.provider);\n    if (!pool || pool.mode !== 'multi') {\n      throw new Error(\n        `Proxy Hub source ${displayRef(source)} is not an enabled multi-account pool`,\n      );\n    }\n    const accounts = await Promise.all(\n      pool.members\n        .filter((member) => member.enabled)\n        .map((member) => this.deps.accounts.get(source.provider, member.account)),\n    );\n    const resolved = accounts.filter(\n      (account): account is NonNullable<typeof account> => account != null,\n    );\n    if (resolved.length === 0) {\n      throw new Error(`Proxy Hub source ${displayRef(source)} has no saved accounts`);\n    }\n    return resolved.map((account) => ({\n      name: account.meta.name,\n      snapshotDir: account.snapshotDir,\n      proxy: account.proxy,\n    }));\n  }\n}\n\n/**\n * The single public listener. Provider servers run as private loopback\n * backends in this same process; their per-backend token is never exposed to a\n * client. This keeps provider protocol code provider-owned while eliminating\n * the user-visible endpoint/process fan-out.\n */\nexport class ProxyHubServer {\n  readonly instanceId: string;\n  private readonly backends: ProxyHubBackendRegistry;\n  private closed = false;\n  private readonly log: (line: string) => void;\n  private readonly server: Server;\n\n  constructor(\n    private readonly deps: ProxyHubServerDeps,\n    private readonly opts: ProxyHubServerOptions,\n  ) {\n    assertLoopbackHost(opts.host);\n    this.instanceId = opts.instanceId ?? randomUUID();\n    this.log = opts.log ?? (() => {});\n    this.backends = new ProxyHubBackendRegistry(deps, this.log);\n    this.server = createServer((req, res) => {\n      void this.handle(req, res).catch((error) => this.fail(res, error));\n    });\n  }\n\n  async listen(): Promise<{ endpoint: string; port: number }> {\n    await new Promise<void>((resolve, reject) => {\n      this.server.once('error', reject);\n      this.server.listen(this.opts.port, this.opts.host, () => resolve());\n    });\n    const address = this.server.address();\n    if (!address || typeof address === 'string') {\n      throw new Error('Proxy Hub did not bind a TCP listener');\n    }\n    return { endpoint: `http://${this.opts.host}:${address.port}`, port: address.port };\n  }\n\n  async close(): Promise<void> {\n    if (this.closed) {\n      return;\n    }\n    this.closed = true;\n    // Drop keep-alive / mid-stream clients so close() does not hang under\n    // `tsx watch` reloads (tsx force-kills after 5s if we stall on open SSE).\n    this.server.closeIdleConnections?.();\n    await Promise.allSettled([this.backends.close()]);\n    await new Promise<void>((resolve) => {\n      const force = setTimeout(() => {\n        this.server.closeAllConnections?.();\n        resolve();\n      }, 1_500);\n      force.unref?.();\n      this.server.close((error) => {\n        clearTimeout(force);\n        if (error && (error as NodeJS.ErrnoException).code !== 'ERR_SERVER_NOT_RUNNING') {\n          // Still resolve — caller is shutting down.\n        }\n        resolve();\n      });\n    });\n    this.server.closeAllConnections?.();\n  }\n\n  private async handle(req: IncomingMessage, res: ServerResponse): Promise<void> {\n    // Codex treats a model-provider `base_url` as a prefix and calls\n    // `/responses`; OpenAI SDKs call `/v1/responses`. Canonicalize to `/v1/*`\n    // before routing so both spellings reach the same backend.\n    const url = new URL(normalizeLocalApiUrl(req.url ?? '/'), `http://${this.opts.host}`);\n    const path = url.pathname;\n    const method = req.method ?? 'GET';\n\n    if ((method === 'GET' || method === 'HEAD') && (path === '/' || path === '/health')) {\n      this.json(res, 200, {\n        ok: true,\n        service: 'anypick-proxy-hub',\n        instanceId: this.instanceId,\n        hub: this.opts.name,\n      });\n      return;\n    }\n    if (!path.startsWith('/v1/')) {\n      this.json(res, 404, { error: { type: 'not_found_error', message: `Not found: ${path}` } });\n      return;\n    }\n\n    const route = await this.authenticate(req);\n    if (!route) {\n      this.json(res, 401, {\n        error: { type: 'authentication_error', message: 'Invalid proxy token' },\n      });\n      return;\n    }\n    if (route.manifest.hub !== this.opts.name) {\n      this.json(res, 403, {\n        error: { type: 'permission_error', message: 'Route is not valid for this hub' },\n      });\n      return;\n    }\n\n    if (method === 'GET' && path === '/v1/models') {\n      this.json(res, 200, {\n        object: 'list',\n        data: route.manifest.routes.map((target) => ({\n          id: target.model,\n          object: 'model',\n          owned_by: 'anypick',\n        })),\n      });\n      return;\n    }\n\n    if (method !== 'POST') {\n      this.json(res, 405, { error: { type: 'invalid_request_error', message: 'POST required' } });\n      return;\n    }\n\n    const body = await readBody(req);\n    const request = parseRequest(body);\n    if (!request || typeof request.model !== 'string' || !request.model.trim()) {\n      this.json(res, 400, {\n        error: { type: 'invalid_request_error', message: 'model is required' },\n      });\n      return;\n    }\n    const target = route.manifest.routes.find((candidate) => candidate.model === request.model);\n    if (!target) {\n      this.json(res, 400, {\n        error: {\n          type: 'invalid_request_error',\n          message: `Model ${request.model} is not available for this proxy route`,\n        },\n      });\n      return;\n    }\n\n    // Claude Code polls this for context budgeting. Many provider backends\n    // (xAI Grok, etc.) do not implement it and return 404 — never forward, or\n    // the upstream may treat the spam as abuse.\n    if (path === '/v1/messages/count_tokens') {\n      const inputTokens = estimateAnthropicInputTokens(request);\n      this.log(`count_tokens ${safeLogField(target.model)} → ${inputTokens} (local estimate)`);\n      this.json(res, 200, { input_tokens: inputTokens });\n      return;\n    }\n\n    request.model = target.upstreamModel;\n    // Claude Code emits `\"required\": null` on tool schemas; strict backends\n    // (xAI) reject that. Sanitize here so every provider backend benefits.\n    const sanitized = sanitizeInferenceToolSchemas(url.pathname, request);\n    const backend = await this.backends.open(target.source);\n    const startedAt = Date.now();\n    const model = safeLogField(target.model);\n    const source = safeLogField(displayRef(target.source));\n    try {\n      const outcome = await this.forward(\n        req,\n        res,\n        url,\n        Buffer.from(JSON.stringify(sanitized.body)),\n        backend,\n      );\n      const elapsed = Date.now() - startedAt;\n      if (outcome === 'client-disconnect') {\n        // Claude (and other clients) cancel in-flight tool rounds often; this is\n        // not a backend failure. Log quietly so real errors stay visible.\n        this.log(`route ${model} -> ${source} client disconnect ${elapsed}ms`);\n      } else {\n        this.log(`route ${model} -> ${source} ${res.statusCode} ${elapsed}ms`);\n      }\n    } catch (error) {\n      this.log(`route ${model} -> ${source} failed ${Date.now() - startedAt}ms`);\n      throw error;\n    }\n  }\n\n  private async authenticate(req: IncomingMessage): Promise<ProxyHubRouteSecret | null> {\n    const raw = requestToken(req);\n    if (!raw) {\n      return null;\n    }\n    const routes = this.deps.hubs.listRouteSecrets(this.opts.name);\n    let authenticated: ProxyHubRouteSecret | null = null;\n    for (const candidate of routes) {\n      if (sameSecret(raw, candidate.token)) {\n        authenticated = candidate;\n      }\n    }\n    return authenticated;\n  }\n\n  private async forward(\n    req: IncomingMessage,\n    res: ServerResponse,\n    url: URL,\n    body: Buffer,\n    backend: ProxyHubBackendSession,\n  ): Promise<'ok' | 'client-disconnect'> {\n    const headers = new Headers();\n    for (const [key, value] of Object.entries(req.headers)) {\n      const normalized = key.toLowerCase();\n      if (\n        value === undefined ||\n        HOP_BY_HOP.has(normalized) ||\n        normalized === 'host' ||\n        normalized === 'authorization' ||\n        // Request content-length is set from the rewritten body below.\n        normalized === 'content-length'\n      ) {\n        continue;\n      }\n      headers.set(key, Array.isArray(value) ? value.join(', ') : value);\n    }\n    headers.set('authorization', `Bearer ${backend.token}`);\n    headers.set('content-length', String(body.byteLength));\n\n    const abort = new AbortController();\n    const markClientGone = () => {\n      if (!abort.signal.aborted) {\n        abort.abort(new Error('client disconnected'));\n      }\n    };\n    const onRequestAbort = () => markClientGone();\n    // Successful completion also emits 'close'. Only cancel upstream when the\n    // client hung up before we finished writing.\n    const onResponseClose = () => {\n      if (!res.writableFinished) {\n        markClientGone();\n      }\n    };\n    req.once('aborted', onRequestAbort);\n    res.once('close', onResponseClose);\n    try {\n      const upstream = await fetch(`${backend.handle.endpoint}${url.pathname}${url.search}`, {\n        method: req.method,\n        headers,\n        body: new Uint8Array(body),\n        signal: abort.signal,\n        redirect: 'manual',\n      });\n      for (const [key, value] of upstream.headers.entries()) {\n        if (!HOP_BY_HOP.has(key.toLowerCase())) {\n          res.setHeader(key, value);\n        }\n      }\n      res.statusCode = upstream.status;\n      if (!upstream.body) {\n        res.end();\n        return 'ok';\n      }\n      // Manual pipe (not stream.pipeline): Claude cancels tool rounds constantly.\n      // pipeline() rejects with \"Premature close\" on those disconnects; the\n      // reader loop treats them as a normal client-disconnect outcome instead.\n      return await pipeWebStreamToResponse(upstream.body, res, abort);\n    } catch (error) {\n      if (isBenignClientClose(error, res, abort.signal)) {\n        if (!res.writableEnded && !res.destroyed) {\n          res.end();\n        }\n        return 'client-disconnect';\n      }\n      throw error;\n    } finally {\n      req.removeListener('aborted', onRequestAbort);\n      res.removeListener('close', onResponseClose);\n    }\n  }\n\n  private json(res: ServerResponse, status: number, body: unknown): void {\n    const raw = JSON.stringify(body);\n    res.writeHead(status, {\n      'content-type': 'application/json; charset=utf-8',\n      'content-length': Buffer.byteLength(raw),\n    });\n    res.end(raw);\n  }\n\n  private fail(res: ServerResponse, error: unknown): void {\n    const message = error instanceof Error ? error.message : String(error);\n    // Client cancel after headers is common with Claude tool loops; do not\n    // spam hub logs or invent a 502 body the client will never read.\n    if (isBenignClientClose(error, res, undefined)) {\n      if (!res.writableEnded && !res.destroyed) {\n        res.end();\n      }\n      return;\n    }\n    this.log(`error ${message}`);\n    if (!res.headersSent) {\n      this.json(res, 502, { error: { type: 'proxy_error', message: 'Proxy Hub backend failed' } });\n    } else if (!res.writableEnded) {\n      res.end();\n    }\n  }\n}\n\n/**\n * Copy a fetch body onto the client response with backpressure. Returns\n * `client-disconnect` when Claude (or another client) cancels mid-stream —\n * never throws \"Premature close\" for that case.\n */\nasync function pipeWebStreamToResponse(\n  body: ReadableStream<Uint8Array>,\n  res: ServerResponse,\n  abort: AbortController,\n): Promise<'ok' | 'client-disconnect'> {\n  let clientGone = abort.signal.aborted;\n  const onAbort = () => {\n    clientGone = true;\n    void body.cancel().catch(() => {});\n  };\n  abort.signal.addEventListener('abort', onAbort, { once: true });\n  const reader = body.getReader() as ReadableStreamDefaultReader<Uint8Array>;\n  try {\n    while (!clientGone && !res.writableEnded && !res.destroyed) {\n      const { done, value } = await reader.read();\n      if (done) {\n        break;\n      }\n      if (!value?.byteLength) {\n        continue;\n      }\n      if (!res.write(Buffer.from(value))) {\n        if (!(await waitForDrain(res))) {\n          clientGone = true;\n          if (!abort.signal.aborted) {\n            abort.abort(new Error('client disconnected'));\n          }\n          void reader.cancel().catch(() => {});\n          break;\n        }\n      }\n    }\n    if (!res.writableEnded && !res.destroyed) {\n      res.end();\n    }\n    return clientGone || abort.signal.aborted ? 'client-disconnect' : 'ok';\n  } catch (error) {\n    if (clientGone || isBenignClientClose(error, res, abort.signal)) {\n      if (!res.writableEnded && !res.destroyed) {\n        res.end();\n      }\n      return 'client-disconnect';\n    }\n    throw error;\n  } finally {\n    abort.signal.removeEventListener('abort', onAbort);\n    try {\n      reader.releaseLock();\n    } catch {\n      // already released / cancelled\n    }\n  }\n}\n\nfunction waitForDrain(res: ServerResponse): Promise<boolean> {\n  if (res.writableEnded || res.destroyed || res.socket?.destroyed) {\n    return Promise.resolve(false);\n  }\n  if (!res.writableNeedDrain) {\n    return Promise.resolve(true);\n  }\n  return new Promise((resolve) => {\n    const done = (ok: boolean) => {\n      res.removeListener('drain', onDrain);\n      res.removeListener('close', onFail);\n      res.removeListener('error', onFail);\n      resolve(ok);\n    };\n    const onDrain = () => done(true);\n    const onFail = () => done(false);\n    res.once('drain', onDrain);\n    res.once('close', onFail);\n    res.once('error', onFail);\n  });\n}\n\n/**\n * fetch throws AbortError when we cancel for a client hang-up. Residual\n * stream errors after the client is gone are also not hub failures.\n */\nfunction isBenignClientClose(\n  error: unknown,\n  res: ServerResponse,\n  signal: AbortSignal | undefined,\n): boolean {\n  if (signal?.aborted) {\n    return true;\n  }\n  if (!error || typeof error !== 'object') {\n    return false;\n  }\n  const value = error as {\n    name?: string;\n    code?: string;\n    message?: string;\n    cause?: unknown;\n    errors?: unknown[];\n  };\n  if (value.name === 'AbortError' || value.code === 'ABORT_ERR') {\n    return true;\n  }\n  if (value.code === 'ERR_STREAM_PREMATURE_CLOSE') {\n    return true;\n  }\n  if (\n    typeof value.message === 'string' &&\n    (/premature close/i.test(value.message) ||\n      /aborted|client disconnected|this operation was aborted|terminated|other side closed/i.test(\n        value.message,\n      ))\n  ) {\n    return true;\n  }\n  // AggregateError from multi-stream cleanup — inspect nested errors.\n  if (Array.isArray(value.errors)) {\n    for (const nested of value.errors) {\n      if (isBenignClientClose(nested, res, signal)) {\n        return true;\n      }\n    }\n  }\n  // Client already gone / response fully written — any residual stream error is\n  // not actionable for the user.\n  if (res.destroyed || res.writableFinished || res.writableEnded) {\n    return (\n      typeof value.message === 'string' &&\n      (/ECONNRESET|EPIPE|socket hang up|write after end|terminated/i.test(value.message) ||\n        value.code === 'ECONNRESET' ||\n        value.code === 'EPIPE' ||\n        value.code === 'UND_ERR_SOCKET')\n    );\n  }\n  return value.cause ? isBenignClientClose(value.cause, res, signal) : false;\n}\n\nfunction safeLogField(value: string): string {\n  return value.replaceAll(/[\\r\\n\\t]/gu, ' ').slice(0, 256);\n}\n\nfunction requestToken(req: IncomingMessage): string | null {\n  if (typeof req.headers.authorization !== 'string') {\n    return null;\n  }\n  const match = /^Bearer\\s+(.+)$/iu.exec(req.headers.authorization.trim());\n  return match?.[1]?.trim() || null;\n}\n\nfunction sameSecret(input: string, expected: string): boolean {\n  const left = Buffer.from(input);\n  const right = Buffer.from(expected);\n  return left.length === right.length && timingSafeEqual(left, right);\n}\n\nasync function readBody(req: IncomingMessage): Promise<Buffer> {\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for await (const chunk of req as AsyncIterable<unknown>) {\n    const next =\n      typeof chunk === 'string'\n        ? new TextEncoder().encode(chunk)\n        : chunk instanceof Uint8Array\n          ? new Uint8Array(chunk)\n          : undefined;\n    if (!next) {\n      throw new Error('Proxy Hub received an invalid request body chunk');\n    }\n    size += next.byteLength;\n    if (size > MAX_REQUEST_BYTES) {\n      throw new Error('Request body exceeds Proxy Hub limit');\n    }\n    chunks.push(next);\n  }\n  return Buffer.concat(chunks);\n}\n\nfunction parseRequest(body: Buffer): Record<string, unknown> | null {\n  try {\n    const parsed = JSON.parse(body.toString('utf8')) as unknown;\n    return parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n      ? (parsed as Record<string, unknown>)\n      : null;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;AAaA,IAAM,oBAAoB,KAAK,OAAO;AACtC,IAAM,6BAAa,IAAI,IAAI;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;AACF,CAAC;;AAuBD,IAAa,0BAAb,MAAqC;CAIhB;CACA;CAJnB,2BAA4B,IAAI,IAAoC;CAEpE,YACE,MACA,KACA;EAFiB,KAAA,OAAA;EACA,KAAA,MAAA;CAChB;CAEH,MAAM,KAAK,QAA4D;EACrE,MAAM,WAAW,aAAa,MAAM;EACpC,MAAM,WAAW,KAAK,SAAS,IAAI,QAAQ;EAC3C,IAAI,UACF,OAAO;EAET,MAAM,WAAW,MAAM,KAAK,YAAY,MAAM;EAC9C,MAAM,WAAW,KAAK,KAAK,gBAAgB,IAAI,OAAO,QAAQ;EAC9D,IAAI,CAAC,SAAS,uBACZ,MAAM,IAAI,MAAM,GAAG,SAAS,KAAK,4BAA4B;EAE/D,MAAM,QAAQ,YAAY,EAAE,CAAC,CAAC,SAAS,KAAK;EAO5C,MAAM,QAAgC;GAAE;GAAO,QAAA,MAN1B,SAAS,sBAAsB;IAClD;IACA;IACA;IACA,MAAM,SAAS,KAAK,IAAI,IAAI,WAAW,MAAM,EAAE,IAAI,MAAM;GAC3D,CAAC;EACqD;EACtD,KAAK,SAAS,IAAI,UAAU,KAAK;EACjC,OAAO;CACT;CAEA,MAAM,QAAuB;EAC3B,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,MAAM,OAAO,MAAM,CAAC,CAAC;EACzF,KAAK,SAAS,MAAM;CACtB;CAEA,MAAc,YAAY,QAA2B;EACnD,IAAI,OAAO,SAAS,WAAW;GAC7B,MAAM,UAAU,MAAM,KAAK,KAAK,SAAS,IAAI,OAAO,UAAU,OAAO,IAAI;GACzE,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oBAAoB,WAAW,MAAM,EAAE,gBAAgB;GAEzE,OAAO,CAAC;IAAE,MAAM,QAAQ,KAAK;IAAM,aAAa,QAAQ;IAAa,OAAO,QAAQ;GAAM,CAAC;EAC7F;EACA,MAAM,OAAO,MAAM,KAAK,KAAK,MAAM,IAAI,OAAO,QAAQ;EACtD,IAAI,CAAC,QAAQ,KAAK,SAAS,SACzB,MAAM,IAAI,MACR,oBAAoB,WAAW,MAAM,EAAE,sCACzC;EAOF,MAAM,YAAW,MALM,QAAQ,IAC7B,KAAK,QACF,QAAQ,WAAW,OAAO,OAAO,CAAC,CAClC,KAAK,WAAW,KAAK,KAAK,SAAS,IAAI,OAAO,UAAU,OAAO,OAAO,CAAC,CAC5E,EAAA,CAC0B,QACvB,YAAoD,WAAW,IAClE;EACA,IAAI,SAAS,WAAW,GACtB,MAAM,IAAI,MAAM,oBAAoB,WAAW,MAAM,EAAE,uBAAuB;EAEhF,OAAO,SAAS,KAAK,aAAa;GAChC,MAAM,QAAQ,KAAK;GACnB,aAAa,QAAQ;GACrB,OAAO,QAAQ;EACjB,EAAE;CACJ;AACF;;;;;;;AAQA,IAAa,iBAAb,MAA4B;CAQP;CACA;CARnB;CACA;CACA,SAAiB;CACjB;CACA;CAEA,YACE,MACA,MACA;EAFiB,KAAA,OAAA;EACA,KAAA,OAAA;EAEjB,mBAAmB,KAAK,IAAI;EAC5B,KAAK,aAAa,KAAK,cAAc,WAAW;EAChD,KAAK,MAAM,KAAK,cAAc,CAAC;EAC/B,KAAK,WAAW,IAAI,wBAAwB,MAAM,KAAK,GAAG;EAC1D,KAAK,SAAS,cAAc,KAAK,QAAQ;GACvC,KAAU,OAAO,KAAK,GAAG,CAAC,CAAC,OAAO,UAAU,KAAK,KAAK,KAAK,KAAK,CAAC;EACnE,CAAC;CACH;CAEA,MAAM,SAAsD;EAC1D,MAAM,IAAI,SAAe,SAAS,WAAW;GAC3C,KAAK,OAAO,KAAK,SAAS,MAAM;GAChC,KAAK,OAAO,OAAO,KAAK,KAAK,MAAM,KAAK,KAAK,YAAY,QAAQ,CAAC;EACpE,CAAC;EACD,MAAM,UAAU,KAAK,OAAO,QAAQ;EACpC,IAAI,CAAC,WAAW,OAAO,YAAY,UACjC,MAAM,IAAI,MAAM,uCAAuC;EAEzD,OAAO;GAAE,UAAU,UAAU,KAAK,KAAK,KAAK,GAAG,QAAQ;GAAQ,MAAM,QAAQ;EAAK;CACpF;CAEA,MAAM,QAAuB;EAC3B,IAAI,KAAK,QACP;EAEF,KAAK,SAAS;EAGd,KAAK,OAAO,uBAAuB;EACnC,MAAM,QAAQ,WAAW,CAAC,KAAK,SAAS,MAAM,CAAC,CAAC;EAChD,MAAM,IAAI,SAAe,YAAY;GACnC,MAAM,QAAQ,iBAAiB;IAC7B,KAAK,OAAO,sBAAsB;IAClC,QAAQ;GACV,GAAG,IAAK;GACR,MAAM,QAAQ;GACd,KAAK,OAAO,OAAO,UAAU;IAC3B,aAAa,KAAK;IAClB,IAAI,SAAU,MAAgC,SAAS,0BAA0B,CAEjF;IACA,QAAQ;GACV,CAAC;EACH,CAAC;EACD,KAAK,OAAO,sBAAsB;CACpC;CAEA,MAAc,OAAO,KAAsB,KAAoC;EAI7E,MAAM,MAAM,IAAI,IAAI,qBAAqB,IAAI,OAAO,GAAG,GAAG,UAAU,KAAK,KAAK,MAAM;EACpF,MAAM,OAAO,IAAI;EACjB,MAAM,SAAS,IAAI,UAAU;EAE7B,KAAK,WAAW,SAAS,WAAW,YAAY,SAAS,OAAO,SAAS,YAAY;GACnF,KAAK,KAAK,KAAK,KAAK;IAClB,IAAI;IACJ,SAAS;IACT,YAAY,KAAK;IACjB,KAAK,KAAK,KAAK;GACjB,CAAC;GACD;EACF;EACA,IAAI,CAAC,KAAK,WAAW,MAAM,GAAG;GAC5B,KAAK,KAAK,KAAK,KAAK,EAAE,OAAO;IAAE,MAAM;IAAmB,SAAS,cAAc;GAAO,EAAE,CAAC;GACzF;EACF;EAEA,MAAM,QAAQ,MAAM,KAAK,aAAa,GAAG;EACzC,IAAI,CAAC,OAAO;GACV,KAAK,KAAK,KAAK,KAAK,EAClB,OAAO;IAAE,MAAM;IAAwB,SAAS;GAAsB,EACxE,CAAC;GACD;EACF;EACA,IAAI,MAAM,SAAS,QAAQ,KAAK,KAAK,MAAM;GACzC,KAAK,KAAK,KAAK,KAAK,EAClB,OAAO;IAAE,MAAM;IAAoB,SAAS;GAAkC,EAChF,CAAC;GACD;EACF;EAEA,IAAI,WAAW,SAAS,SAAS,cAAc;GAC7C,KAAK,KAAK,KAAK,KAAK;IAClB,QAAQ;IACR,MAAM,MAAM,SAAS,OAAO,KAAK,YAAY;KAC3C,IAAI,OAAO;KACX,QAAQ;KACR,UAAU;IACZ,EAAE;GACJ,CAAC;GACD;EACF;EAEA,IAAI,WAAW,QAAQ;GACrB,KAAK,KAAK,KAAK,KAAK,EAAE,OAAO;IAAE,MAAM;IAAyB,SAAS;GAAgB,EAAE,CAAC;GAC1F;EACF;EAGA,MAAM,UAAU,aAAa,MADV,SAAS,GAAG,CACE;EACjC,IAAI,CAAC,WAAW,OAAO,QAAQ,UAAU,YAAY,CAAC,QAAQ,MAAM,KAAK,GAAG;GAC1E,KAAK,KAAK,KAAK,KAAK,EAClB,OAAO;IAAE,MAAM;IAAyB,SAAS;GAAoB,EACvE,CAAC;GACD;EACF;EACA,MAAM,SAAS,MAAM,SAAS,OAAO,MAAM,cAAc,UAAU,UAAU,QAAQ,KAAK;EAC1F,IAAI,CAAC,QAAQ;GACX,KAAK,KAAK,KAAK,KAAK,EAClB,OAAO;IACL,MAAM;IACN,SAAS,SAAS,QAAQ,MAAM;GAClC,EACF,CAAC;GACD;EACF;EAKA,IAAI,SAAS,6BAA6B;GACxC,MAAM,cAAc,6BAA6B,OAAO;GACxD,KAAK,IAAI,gBAAgB,aAAa,OAAO,KAAK,EAAE,KAAK,YAAY,kBAAkB;GACvF,KAAK,KAAK,KAAK,KAAK,EAAE,cAAc,YAAY,CAAC;GACjD;EACF;EAEA,QAAQ,QAAQ,OAAO;EAGvB,MAAM,YAAY,6BAA6B,IAAI,UAAU,OAAO;EACpE,MAAM,UAAU,MAAM,KAAK,SAAS,KAAK,OAAO,MAAM;EACtD,MAAM,YAAY,KAAK,IAAI;EAC3B,MAAM,QAAQ,aAAa,OAAO,KAAK;EACvC,MAAM,SAAS,aAAa,WAAW,OAAO,MAAM,CAAC;EACrD,IAAI;GACF,MAAM,UAAU,MAAM,KAAK,QACzB,KACA,KACA,KACA,OAAO,KAAK,KAAK,UAAU,UAAU,IAAI,CAAC,GAC1C,OACF;GACA,MAAM,UAAU,KAAK,IAAI,IAAI;GAC7B,IAAI,YAAY,qBAGd,KAAK,IAAI,SAAS,MAAM,MAAM,OAAO,qBAAqB,QAAQ,GAAG;QAErE,KAAK,IAAI,SAAS,MAAM,MAAM,OAAO,GAAG,IAAI,WAAW,GAAG,QAAQ,GAAG;EAEzE,SAAS,OAAO;GACd,KAAK,IAAI,SAAS,MAAM,MAAM,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,GAAG;GACzE,MAAM;EACR;CACF;CAEA,MAAc,aAAa,KAA2D;EACpF,MAAM,MAAM,aAAa,GAAG;EAC5B,IAAI,CAAC,KACH,OAAO;EAET,MAAM,SAAS,KAAK,KAAK,KAAK,iBAAiB,KAAK,KAAK,IAAI;EAC7D,IAAI,gBAA4C;EAChD,KAAK,MAAM,aAAa,QACtB,IAAI,WAAW,KAAK,UAAU,KAAK,GACjC,gBAAgB;EAGpB,OAAO;CACT;CAEA,MAAc,QACZ,KACA,KACA,KACA,MACA,SACqC;EACrC,MAAM,UAAU,IAAI,QAAQ;EAC5B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,OAAO,GAAG;GACtD,MAAM,aAAa,IAAI,YAAY;GACnC,IACE,UAAU,KAAA,KACV,WAAW,IAAI,UAAU,KACzB,eAAe,UACf,eAAe,mBAEf,eAAe,kBAEf;GAEF,QAAQ,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK;EAClE;EACA,QAAQ,IAAI,iBAAiB,UAAU,QAAQ,OAAO;EACtD,QAAQ,IAAI,kBAAkB,OAAO,KAAK,UAAU,CAAC;EAErD,MAAM,QAAQ,IAAI,gBAAgB;EAClC,MAAM,uBAAuB;GAC3B,IAAI,CAAC,MAAM,OAAO,SAChB,MAAM,sBAAM,IAAI,MAAM,qBAAqB,CAAC;EAEhD;EACA,MAAM,uBAAuB,eAAe;EAG5C,MAAM,wBAAwB;GAC5B,IAAI,CAAC,IAAI,kBACP,eAAe;EAEnB;EACA,IAAI,KAAK,WAAW,cAAc;EAClC,IAAI,KAAK,SAAS,eAAe;EACjC,IAAI;GACF,MAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,OAAO,WAAW,IAAI,WAAW,IAAI,UAAU;IACrF,QAAQ,IAAI;IACZ;IACA,MAAM,IAAI,WAAW,IAAI;IACzB,QAAQ,MAAM;IACd,UAAU;GACZ,CAAC;GACD,KAAK,MAAM,CAAC,KAAK,UAAU,SAAS,QAAQ,QAAQ,GAClD,IAAI,CAAC,WAAW,IAAI,IAAI,YAAY,CAAC,GACnC,IAAI,UAAU,KAAK,KAAK;GAG5B,IAAI,aAAa,SAAS;GAC1B,IAAI,CAAC,SAAS,MAAM;IAClB,IAAI,IAAI;IACR,OAAO;GACT;GAIA,OAAO,MAAM,wBAAwB,SAAS,MAAM,KAAK,KAAK;EAChE,SAAS,OAAO;GACd,IAAI,oBAAoB,OAAO,KAAK,MAAM,MAAM,GAAG;IACjD,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,WAC7B,IAAI,IAAI;IAEV,OAAO;GACT;GACA,MAAM;EACR,UAAU;GACR,IAAI,eAAe,WAAW,cAAc;GAC5C,IAAI,eAAe,SAAS,eAAe;EAC7C;CACF;CAEA,KAAa,KAAqB,QAAgB,MAAqB;EACrE,MAAM,MAAM,KAAK,UAAU,IAAI;EAC/B,IAAI,UAAU,QAAQ;GACpB,gBAAgB;GAChB,kBAAkB,OAAO,WAAW,GAAG;EACzC,CAAC;EACD,IAAI,IAAI,GAAG;CACb;CAEA,KAAa,KAAqB,OAAsB;EACtD,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAGrE,IAAI,oBAAoB,OAAO,KAAK,KAAA,CAAS,GAAG;GAC9C,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,WAC7B,IAAI,IAAI;GAEV;EACF;EACA,KAAK,IAAI,SAAS,SAAS;EAC3B,IAAI,CAAC,IAAI,aACP,KAAK,KAAK,KAAK,KAAK,EAAE,OAAO;GAAE,MAAM;GAAe,SAAS;EAA2B,EAAE,CAAC;OACtF,IAAI,CAAC,IAAI,eACd,IAAI,IAAI;CAEZ;AACF;;;;;;AAOA,eAAe,wBACb,MACA,KACA,OACqC;CACrC,IAAI,aAAa,MAAM,OAAO;CAC9B,MAAM,gBAAgB;EACpB,aAAa;EACb,KAAU,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;CACnC;CACA,MAAM,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;CAC9D,MAAM,SAAS,KAAK,UAAU;CAC9B,IAAI;EACF,OAAO,CAAC,cAAc,CAAC,IAAI,iBAAiB,CAAC,IAAI,WAAW;GAC1D,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MACF;GAEF,IAAI,CAAC,OAAO,YACV;GAEF,IAAI,CAAC,IAAI,MAAM,OAAO,KAAK,KAAK,CAAC;QAC3B,CAAE,MAAM,aAAa,GAAG,GAAI;KAC9B,aAAa;KACb,IAAI,CAAC,MAAM,OAAO,SAChB,MAAM,sBAAM,IAAI,MAAM,qBAAqB,CAAC;KAE9C,OAAY,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;KACnC;IACF;;EAEJ;EACA,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,WAC7B,IAAI,IAAI;EAEV,OAAO,cAAc,MAAM,OAAO,UAAU,sBAAsB;CACpE,SAAS,OAAO;EACd,IAAI,cAAc,oBAAoB,OAAO,KAAK,MAAM,MAAM,GAAG;GAC/D,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,WAC7B,IAAI,IAAI;GAEV,OAAO;EACT;EACA,MAAM;CACR,UAAU;EACR,MAAM,OAAO,oBAAoB,SAAS,OAAO;EACjD,IAAI;GACF,OAAO,YAAY;EACrB,QAAQ,CAER;CACF;AACF;AAEA,SAAS,aAAa,KAAuC;CAC3D,IAAI,IAAI,iBAAiB,IAAI,aAAa,IAAI,QAAQ,WACpD,OAAO,QAAQ,QAAQ,KAAK;CAE9B,IAAI,CAAC,IAAI,mBACP,OAAO,QAAQ,QAAQ,IAAI;CAE7B,OAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,QAAQ,OAAgB;GAC5B,IAAI,eAAe,SAAS,OAAO;GACnC,IAAI,eAAe,SAAS,MAAM;GAClC,IAAI,eAAe,SAAS,MAAM;GAClC,QAAQ,EAAE;EACZ;EACA,MAAM,gBAAgB,KAAK,IAAI;EAC/B,MAAM,eAAe,KAAK,KAAK;EAC/B,IAAI,KAAK,SAAS,OAAO;EACzB,IAAI,KAAK,SAAS,MAAM;EACxB,IAAI,KAAK,SAAS,MAAM;CAC1B,CAAC;AACH;;;;;AAMA,SAAS,oBACP,OACA,KACA,QACS;CACT,IAAI,QAAQ,SACV,OAAO;CAET,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO;CAET,MAAM,QAAQ;CAOd,IAAI,MAAM,SAAS,gBAAgB,MAAM,SAAS,aAChD,OAAO;CAET,IAAI,MAAM,SAAS,8BACjB,OAAO;CAET,IACE,OAAO,MAAM,YAAY,aACxB,mBAAmB,KAAK,MAAM,OAAO,KACpC,uFAAuF,KACrF,MAAM,OACR,IAEF,OAAO;CAGT,IAAI,MAAM,QAAQ,MAAM,MAAM;OACvB,MAAM,UAAU,MAAM,QACzB,IAAI,oBAAoB,QAAQ,KAAK,MAAM,GACzC,OAAO;CAAA;CAMb,IAAI,IAAI,aAAa,IAAI,oBAAoB,IAAI,eAC/C,OACE,OAAO,MAAM,YAAY,aACxB,8DAA8D,KAAK,MAAM,OAAO,KAC/E,MAAM,SAAS,gBACf,MAAM,SAAS,WACf,MAAM,SAAS;CAGrB,OAAO,MAAM,QAAQ,oBAAoB,MAAM,OAAO,KAAK,MAAM,IAAI;AACvE;AAEA,SAAS,aAAa,OAAuB;CAC3C,OAAO,MAAM,WAAW,cAAc,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG;AACzD;AAEA,SAAS,aAAa,KAAqC;CACzD,IAAI,OAAO,IAAI,QAAQ,kBAAkB,UACvC,OAAO;CAGT,OADc,oBAAoB,KAAK,IAAI,QAAQ,cAAc,KAAK,CAC/D,CAAA,GAAQ,EAAE,EAAE,KAAK,KAAK;AAC/B;AAEA,SAAS,WAAW,OAAe,UAA2B;CAC5D,MAAM,OAAO,OAAO,KAAK,KAAK;CAC9B,MAAM,QAAQ,OAAO,KAAK,QAAQ;CAClC,OAAO,KAAK,WAAW,MAAM,UAAU,gBAAgB,MAAM,KAAK;AACpE;AAEA,eAAe,SAAS,KAAuC;CAC7D,MAAM,SAAuB,CAAC;CAC9B,IAAI,OAAO;CACX,WAAW,MAAM,SAAS,KAA+B;EACvD,MAAM,OACJ,OAAO,UAAU,WACb,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,IAC9B,iBAAiB,aACf,IAAI,WAAW,KAAK,IACpB,KAAA;EACR,IAAI,CAAC,MACH,MAAM,IAAI,MAAM,kDAAkD;EAEpE,QAAQ,KAAK;EACb,IAAI,OAAO,mBACT,MAAM,IAAI,MAAM,sCAAsC;EAExD,OAAO,KAAK,IAAI;CAClB;CACA,OAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAAS,aAAa,MAA8C;CAClE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,KAAK,SAAS,MAAM,CAAC;EAC/C,OAAO,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IAC/D,SACD;CACN,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/core/proxy-hub-service.d.ts

@@ -0,0 +1,97 @@
+import type { ClientId, Protocol, ProxyHubConfig, ProxyHubSource, ProxyHubSourceRef, ProxyHubStatus } from '../types.js';
+import { type ProxyHubServerDeps } from './proxy-hub-server.js';
+import { type CompiledProxyHubRoutes } from './proxy-hub-routes.js';
+import { ProxyHubStore, type ProxyHubRouteSecret } from './proxy-hub-store.js';
+export interface ProxyHubCatalogSnapshot {
+    source: ProxyHubSourceRef;
+    catalogId: string;
+    models: string[];
+}
+export interface ProxyHubPreview extends CompiledProxyHubRoutes {
+    config: ProxyHubConfig;
+    catalogs: ProxyHubCatalogSnapshot[];
+    unavailable: Array<{
+        source: ProxyHubSourceRef;
+        reason: string;
+    }>;
+}
+/**
+ * Owns Hub configuration and route attachment. The server owns no persisted
+ * mutation: it reads these versioned, token-scoped manifests at its boundary.
+ */
+export declare class ProxyHubService {
+    private readonly root;
+    private readonly store;
+    private readonly deps;
+    private readonly previewCache;
+    private readonly previewPending;
+    constructor(root: string, store: ProxyHubStore, deps: ProxyHubServerDeps);
+    /**
+     * Optional re-publisher for the live Codex config block, wired in app.ts so this
+     * service does not depend on Codex/Proxy services it was not constructed with.
+     */
+    private codexLiveConfigSync?;
+    setCodexLiveConfigSync(fn: () => Promise<void>): void;
+    private syncCodexLiveConfig;
+    get(name?: string): Promise<ProxyHubConfig>;
+    save(config: Omit<ProxyHubConfig, 'revision' | 'createdAt' | 'updatedAt'> & Partial<Pick<ProxyHubConfig, 'revision' | 'createdAt' | 'updatedAt'>>): Promise<ProxyHubConfig>;
+    setSources(name: string, sources: ProxyHubSource[]): Promise<ProxyHubConfig>;
+    /**
+     * Drop a deleted saved account from Hub sources and model owners.
+     * AccountService calls this after the account row is gone so a removed
+     * login cannot keep blocking attach or linger in Hub Sources.
+     */
+    forgetAccount(providerId: string, accountName: string, name?: string): Promise<void>;
+    setModelOwner(name: string, model: string, source: ProxyHubSourceRef | undefined): Promise<ProxyHubConfig>;
+    /**
+     * Persist one explicit source choice for a set of colliding raw model ids.
+     * Discovery and the single config write share the Hub/provider lock set, so
+     * a stale Tray action can never assign a model to a source that stopped
+     * advertising it while the action was in flight.
+     */
+    setModelOwners(name: string, models: readonly string[], source: ProxyHubSourceRef | undefined): Promise<ProxyHubConfig>;
+    /** Refresh source catalogs through provider-owned in-process backends. */
+    preview(name?: string): Promise<ProxyHubPreview>;
+    /** Force provider-owned catalog discovery instead of accepting the 10 s preview cache. */
+    refreshPreview(name?: string): Promise<ProxyHubPreview>;
+    private loadPreview;
+    /** Read a bounded tail of the detached Hub process log. */
+    logs(name?: string, lines?: number): Promise<string>;
+    private previewWithConfig;
+    attachRoute(routeId: string, client: ClientId, protocol: Protocol, name?: string, requiredModels?: readonly string[]): Promise<ProxyHubRouteSecret>;
+    getAttachedRoute(routeId: string): ProxyHubRouteSecret | null;
+    getAttachedRouteCount(name?: string): number;
+    restoreRoute(routeId: string, previous: ProxyHubRouteSecret | null): Promise<void>;
+    detachRoute(routeId: string, name?: string): Promise<void>;
+    /** Start the singleton detached Hub process, reusing only a verified instance. */
+    ensureRunning(name?: string): Promise<{
+        endpoint: string;
+        startedNow: boolean;
+        pid: number;
+        instanceId: string;
+    }>;
+    private ensureRunningWithConfig;
+    /**
+     * Reclaim a live hub whose pid record was lost or points at a dead process.
+     * Identity comes from /health (service + hub name + instanceId), not from
+     * "something is listening on the port".
+     */
+    private adoptLiveHub;
+    stop(name?: string): Promise<void>;
+    status(name?: string): Promise<ProxyHubStatus>;
+    private validateSources;
+    private cachedPreview;
+    /**
+     * Read a versioned config, acquire its complete sorted scope set, then prove
+     * it did not change before using it. A source edit that wins the small race
+     * is retried with its new provider scopes instead of running discovery while
+     * an unlisted provider account can mutate.
+     */
+    private withStableConfig;
+    private validateRoutesForClient;
+    private adapterForSource;
+    private adapterForAccount;
+}
+/** Count user decisions, not raw model rows, for compact status surfaces. */
+export declare function proxyHubIssueCount(preview: Pick<ProxyHubPreview, 'conflicts' | 'sourceChoices'>): number;
+//# sourceMappingURL=proxy-hub-service.d.ts.map

package/dist/core/proxy-hub-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-hub-service.d.ts","sourceRoot":"","sources":["../../src/core/proxy-hub-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EACR,cAAc,EAGd,cAAc,EACd,iBAAiB,EACjB,cAAc,EACf,MAAM,UAAU,CAAC;AAYlB,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAyB,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAqB,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAe/F,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,eAAgB,SAAQ,sBAAsB;IAC7D,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,WAAW,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnE;AAED;;;GAGG;AACH,qBAAa,eAAe;IAQxB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IATvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAGzB;IACJ,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA+C;IAE9E,YACmB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,kBAAkB,EACvC;IAEJ;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAC,CAAsB;IAElD,sBAAsB,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAEpD;YAEa,mBAAmB;IAQ3B,GAAG,CAAC,IAAI,SAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAE3D;IAEK,IAAI,CACR,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC,GAClE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC,GACtE,OAAO,CAAC,cAAc,CAAC,CA0BzB;IAEK,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAGjF;IAED;;;;OAIG;IACG,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,IAAI,SAAoB,GACvB,OAAO,CAAC,IAAI,CAAC,CAaf;IAEK,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACpC,OAAO,CAAC,cAAc,CAAC,CAEzB;IAED;;;;;OAKG;IACG,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACpC,OAAO,CAAC,cAAc,CAAC,CA0CzB;IAED,0EAA0E;IACpE,OAAO,CAAC,IAAI,SAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAEhE;IAED,0FAA0F;IACpF,cAAc,CAAC,IAAI,SAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAEvE;YAEa,WAAW;IA8CzB,2DAA2D;IACrD,IAAI,CAAC,IAAI,SAAoB,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBhE;YAEa,iBAAiB;IAgDzB,WAAW,CACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,QAAQ,EAChB,QAAQ,EAAE,QAAQ,EAClB,IAAI,SAAoB,EACxB,cAAc,GAAE,SAAS,MAAM,EAAO,GACrC,OAAO,CAAC,mBAAmB,CAAC,CAyE9B;IAED,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAE5D;IAED,qBAAqB,CAAC,IAAI,SAAoB,GAAG,MAAM,CAEtD;IAEK,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAWvF;IAEK,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAU1E;IAED,kFAAkF;IAC5E,aAAa,CAAC,IAAI,SAAoB,GAAG,OAAO,CAAC;QACrD,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,OAAO,CAAC;QACpB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAOD;YAEa,uBAAuB;IA8IrC;;;;OAIG;YACW,YAAY;IAkCpB,IAAI,CAAC,IAAI,SAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlD;IAEK,MAAM,CAAC,IAAI,SAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAsB9D;YAEa,eAAe;IAkC7B,OAAO,CAAC,aAAa;IAQrB;;;;;OAKG;YACW,gBAAgB;YAwBhB,uBAAuB;YAiBvB,gBAAgB;YAOhB,iBAAiB;CAiBhC;AAqCD,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,eAAe,CAAC,GAC5D,MAAM,CAUR"}