anypick 1.0.0

package/dist/providers/grok-proxy/auth.js

@@ -0,0 +1,123 @@
+import { pathExists, writeTextFile } from "../../utils/fs.js";
+import { withFileLock } from "../../utils/lock.js";
+import { readFile } from "node:fs/promises";
+//#region src/providers/grok-proxy/auth.ts
+/**
+* Load + refresh Grok OIDC session from ~/.grok/auth.json.
+*/
+var REFRESH_SKEW_MS = 6e4;
+async function loadGrokSession(authPath) {
+	if (!await pathExists(authPath)) throw new Error(`Grok auth not found at ${authPath}. Run: grok login`);
+	const entry = pickSession(JSON.parse(await readFile(authPath, "utf8")));
+	if (!entry) throw new Error(`No OIDC session in ${authPath}. Run: grok login`);
+	const [storageKey, raw] = entry;
+	const accessToken = typeof raw.key === "string" && raw.key || typeof raw.access_token === "string" && raw.access_token || "";
+	const refreshToken = typeof raw.refresh_token === "string" && raw.refresh_token || "";
+	const oidcIssuer = typeof raw.oidc_issuer === "string" && raw.oidc_issuer || "https://auth.x.ai";
+	const oidcClientId = typeof raw.oidc_client_id === "string" && raw.oidc_client_id || storageKey.split("::")[1] || "";
+	if (!accessToken && !refreshToken) throw new Error("Grok session has no access or refresh token.");
+	if (!oidcClientId) throw new Error("Grok session missing oidc_client_id.");
+	return {
+		accessToken,
+		refreshToken,
+		expiresAt: typeof raw.expires_at === "string" ? raw.expires_at : void 0,
+		email: typeof raw.email === "string" ? raw.email : void 0,
+		oidcIssuer,
+		oidcClientId,
+		storageKey,
+		raw
+	};
+}
+function pickSession(data) {
+	const entries = Object.entries(data).filter(([, v]) => v && typeof v === "object");
+	if (entries.length === 0) return null;
+	return entries.find(([, v]) => typeof v.key === "string" || typeof v.refresh_token === "string" || v.auth_mode === "oidc") ?? entries[0];
+}
+function isExpired(session, now = Date.now()) {
+	if (!session.expiresAt) return false;
+	const exp = Date.parse(session.expiresAt);
+	if (Number.isNaN(exp)) return false;
+	return exp - REFRESH_SKEW_MS <= now;
+}
+/**
+* Ensure a valid access token, refreshing via OIDC if needed.
+* Writes refreshed tokens back to authPath so Grok CLI stays in sync.
+*/
+async function ensureAccessToken(authPath, session) {
+	let s = session ?? await loadGrokSession(authPath);
+	if (s.accessToken && !isExpired(s)) return {
+		token: s.accessToken,
+		session: s
+	};
+	if (!s.refreshToken) throw new Error("Grok access token expired and no refresh_token available. Run: grok login");
+	s = await refreshSession(authPath, s);
+	return {
+		token: s.accessToken,
+		session: s
+	};
+}
+async function refreshSession(authPath, session) {
+	return withFileLock(`${authPath}.refresh.lock`, async () => {
+		const latest = await loadGrokSession(authPath);
+		if (latest.storageKey === session.storageKey && (latest.accessToken !== session.accessToken || latest.refreshToken !== session.refreshToken)) return latest;
+		return refreshSessionUnlocked(authPath, latest);
+	}, { resource: `Grok auth refresh ${authPath}` });
+}
+async function refreshSessionUnlocked(authPath, session) {
+	const tokenUrl = await resolveTokenEndpoint(session.oidcIssuer);
+	const body = new URLSearchParams({
+		grant_type: "refresh_token",
+		refresh_token: session.refreshToken,
+		client_id: session.oidcClientId
+	});
+	const res = await fetch(tokenUrl, {
+		method: "POST",
+		headers: { "content-type": "application/x-www-form-urlencoded" },
+		body
+	});
+	if (!res.ok) {
+		const text = await res.text().catch(() => "");
+		throw new Error(`Grok OIDC refresh failed (${res.status}): ${text.slice(0, 200)}`);
+	}
+	const data = await res.json();
+	if (!data.access_token) throw new Error("Grok OIDC refresh returned no access_token.");
+	const expiresAt = typeof data.expires_in === "number" ? new Date(Date.now() + data.expires_in * 1e3).toISOString() : session.expiresAt;
+	const updated = {
+		...session,
+		accessToken: data.access_token,
+		refreshToken: data.refresh_token ?? session.refreshToken,
+		expiresAt,
+		raw: {
+			...session.raw,
+			key: data.access_token,
+			refresh_token: data.refresh_token ?? session.refreshToken,
+			expires_at: expiresAt
+		}
+	};
+	await writeSession(authPath, updated);
+	return updated;
+}
+async function resolveTokenEndpoint(issuer) {
+	try {
+		const res = await fetch(`${issuer.replace(/\/$/, "")}/.well-known/openid-configuration`, { signal: AbortSignal.timeout(1e4) });
+		if (res.ok) {
+			const conf = await res.json();
+			if (conf.token_endpoint) return conf.token_endpoint;
+		}
+	} catch {}
+	return `${issuer.replace(/\/$/, "")}/oauth2/token`;
+}
+async function writeSession(authPath, session) {
+	let data = {};
+	if (await pathExists(authPath)) try {
+		data = JSON.parse(await readFile(authPath, "utf8"));
+	} catch {
+		data = {};
+	}
+	data[session.storageKey] = session.raw;
+	await writeTextFile(authPath, `${JSON.stringify(data, null, 2)}\n`, 384);
+}
+//#endregion
+export { ensureAccessToken, isExpired, loadGrokSession, refreshSession };
+
+//# sourceMappingURL=auth.js.map

package/dist/providers/grok-proxy/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","names":[],"sources":["../../../src/providers/grok-proxy/auth.ts"],"sourcesContent":["/**\n * Load + refresh Grok OIDC session from ~/.grok/auth.json.\n */\nimport { readFile } from 'node:fs/promises';\nimport { pathExists, writeTextFile } from '../../utils/fs';\nimport { withFileLock } from '../../utils/lock';\n\nexport interface GrokSession {\n  /** Access token (JWT) sent as Bearer to cli-chat-proxy. */\n  accessToken: string;\n  refreshToken: string;\n  expiresAt?: string;\n  email?: string;\n  oidcIssuer: string;\n  oidcClientId: string;\n  /** Map key in auth.json (issuer::clientId). */\n  storageKey: string;\n  raw: Record<string, unknown>;\n}\n\nexport interface GrokAuthFile {\n  [key: string]: Record<string, unknown>;\n}\n\nconst REFRESH_SKEW_MS = 60_000; // refresh 1 min before expiry\n\nexport async function loadGrokSession(authPath: string): Promise<GrokSession> {\n  if (!(await pathExists(authPath))) {\n    throw new Error(`Grok auth not found at ${authPath}. Run: grok login`);\n  }\n  const data = JSON.parse(await readFile(authPath, 'utf8')) as GrokAuthFile;\n  const entry = pickSession(data);\n  if (!entry) {\n    throw new Error(`No OIDC session in ${authPath}. Run: grok login`);\n  }\n  const [storageKey, raw] = entry;\n  const accessToken =\n    (typeof raw.key === 'string' && raw.key) ||\n    (typeof raw.access_token === 'string' && raw.access_token) ||\n    '';\n  const refreshToken = (typeof raw.refresh_token === 'string' && raw.refresh_token) || '';\n  const oidcIssuer =\n    (typeof raw.oidc_issuer === 'string' && raw.oidc_issuer) || 'https://auth.x.ai';\n  const oidcClientId =\n    (typeof raw.oidc_client_id === 'string' && raw.oidc_client_id) ||\n    storageKey.split('::')[1] ||\n    '';\n\n  if (!accessToken && !refreshToken) {\n    throw new Error('Grok session has no access or refresh token.');\n  }\n  if (!oidcClientId) {\n    throw new Error('Grok session missing oidc_client_id.');\n  }\n\n  return {\n    accessToken,\n    refreshToken,\n    expiresAt: typeof raw.expires_at === 'string' ? raw.expires_at : undefined,\n    email: typeof raw.email === 'string' ? raw.email : undefined,\n    oidcIssuer,\n    oidcClientId,\n    storageKey,\n    raw,\n  };\n}\n\nfunction pickSession(data: GrokAuthFile): [string, Record<string, unknown>] | null {\n  const entries = Object.entries(data).filter(([, v]) => v && typeof v === 'object');\n  if (entries.length === 0) {\n    return null;\n  }\n  // Prefer sessions that look like xAI OIDC\n  const preferred = entries.find(\n    ([, v]) =>\n      typeof v.key === 'string' || typeof v.refresh_token === 'string' || v.auth_mode === 'oidc',\n  );\n  return preferred ?? entries[0];\n}\n\nexport function isExpired(session: GrokSession, now = Date.now()): boolean {\n  if (!session.expiresAt) {\n    return false;\n  }\n  const exp = Date.parse(session.expiresAt);\n  if (Number.isNaN(exp)) {\n    return false;\n  }\n  return exp - REFRESH_SKEW_MS <= now;\n}\n\n/**\n * Ensure a valid access token, refreshing via OIDC if needed.\n * Writes refreshed tokens back to authPath so Grok CLI stays in sync.\n */\nexport async function ensureAccessToken(\n  authPath: string,\n  session?: GrokSession,\n): Promise<{ token: string; session: GrokSession }> {\n  let s = session ?? (await loadGrokSession(authPath));\n  if (s.accessToken && !isExpired(s)) {\n    return { token: s.accessToken, session: s };\n  }\n  if (!s.refreshToken) {\n    throw new Error('Grok access token expired and no refresh_token available. Run: grok login');\n  }\n  s = await refreshSession(authPath, s);\n  return { token: s.accessToken, session: s };\n}\n\nexport async function refreshSession(authPath: string, session: GrokSession): Promise<GrokSession> {\n  // Refresh-token rotation is destructive at many OIDC providers. Serialize\n  // across proxy requests and CLI processes, then reload the file inside the\n  // lock so a waiter returns the winner's newly rotated token instead of\n  // redeeming the old refresh token a second time.\n  return withFileLock(\n    `${authPath}.refresh.lock`,\n    async () => {\n      const latest = await loadGrokSession(authPath);\n      if (\n        latest.storageKey === session.storageKey &&\n        (latest.accessToken !== session.accessToken || latest.refreshToken !== session.refreshToken)\n      ) {\n        return latest;\n      }\n      return refreshSessionUnlocked(authPath, latest);\n    },\n    { resource: `Grok auth refresh ${authPath}` },\n  );\n}\n\nasync function refreshSessionUnlocked(\n  authPath: string,\n  session: GrokSession,\n): Promise<GrokSession> {\n  const tokenUrl = await resolveTokenEndpoint(session.oidcIssuer);\n  const body = new URLSearchParams({\n    grant_type: 'refresh_token',\n    refresh_token: session.refreshToken,\n    client_id: session.oidcClientId,\n  });\n\n  const res = await fetch(tokenUrl, {\n    method: 'POST',\n    headers: { 'content-type': 'application/x-www-form-urlencoded' },\n    body,\n  });\n\n  if (!res.ok) {\n    const text = await res.text().catch(() => '');\n    throw new Error(`Grok OIDC refresh failed (${res.status}): ${text.slice(0, 200)}`);\n  }\n\n  const data = (await res.json()) as {\n    access_token?: string;\n    refresh_token?: string;\n    expires_in?: number;\n  };\n\n  if (!data.access_token) {\n    throw new Error('Grok OIDC refresh returned no access_token.');\n  }\n\n  const expiresAt =\n    typeof data.expires_in === 'number'\n      ? new Date(Date.now() + data.expires_in * 1000).toISOString()\n      : session.expiresAt;\n\n  const updated: GrokSession = {\n    ...session,\n    accessToken: data.access_token,\n    refreshToken: data.refresh_token ?? session.refreshToken,\n    expiresAt,\n    raw: {\n      ...session.raw,\n      key: data.access_token,\n      refresh_token: data.refresh_token ?? session.refreshToken,\n      expires_at: expiresAt,\n    },\n  };\n\n  await writeSession(authPath, updated);\n  return updated;\n}\n\nasync function resolveTokenEndpoint(issuer: string): Promise<string> {\n  try {\n    const res = await fetch(`${issuer.replace(/\\/$/, '')}/.well-known/openid-configuration`, {\n      signal: AbortSignal.timeout(10_000),\n    });\n    if (res.ok) {\n      const conf = (await res.json()) as { token_endpoint?: string };\n      if (conf.token_endpoint) {\n        return conf.token_endpoint;\n      }\n    }\n  } catch {\n    // fall through\n  }\n  return `${issuer.replace(/\\/$/, '')}/oauth2/token`;\n}\n\nasync function writeSession(authPath: string, session: GrokSession): Promise<void> {\n  let data: GrokAuthFile = {};\n  if (await pathExists(authPath)) {\n    try {\n      data = JSON.parse(await readFile(authPath, 'utf8')) as GrokAuthFile;\n    } catch {\n      data = {};\n    }\n  }\n  data[session.storageKey] = session.raw;\n  await writeTextFile(authPath, `${JSON.stringify(data, null, 2)}\\n`, 0o600);\n}\n"],"mappings":";;;;;;;AAwBA,IAAM,kBAAkB;AAExB,eAAsB,gBAAgB,UAAwC;CAC5E,IAAI,CAAE,MAAM,WAAW,QAAQ,GAC7B,MAAM,IAAI,MAAM,0BAA0B,SAAS,kBAAkB;CAGvE,MAAM,QAAQ,YADD,KAAK,MAAM,MAAM,SAAS,UAAU,MAAM,CAC7B,CAAI;CAC9B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,sBAAsB,SAAS,kBAAkB;CAEnE,MAAM,CAAC,YAAY,OAAO;CAC1B,MAAM,cACH,OAAO,IAAI,QAAQ,YAAY,IAAI,OACnC,OAAO,IAAI,iBAAiB,YAAY,IAAI,gBAC7C;CACF,MAAM,eAAgB,OAAO,IAAI,kBAAkB,YAAY,IAAI,iBAAkB;CACrF,MAAM,aACH,OAAO,IAAI,gBAAgB,YAAY,IAAI,eAAgB;CAC9D,MAAM,eACH,OAAO,IAAI,mBAAmB,YAAY,IAAI,kBAC/C,WAAW,MAAM,IAAI,CAAC,CAAC,MACvB;CAEF,IAAI,CAAC,eAAe,CAAC,cACnB,MAAM,IAAI,MAAM,8CAA8C;CAEhE,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,sCAAsC;CAGxD,OAAO;EACL;EACA;EACA,WAAW,OAAO,IAAI,eAAe,WAAW,IAAI,aAAa,KAAA;EACjE,OAAO,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ,KAAA;EACnD;EACA;EACA;EACA;CACF;AACF;AAEA,SAAS,YAAY,MAA8D;CACjF,MAAM,UAAU,OAAO,QAAQ,IAAI,CAAC,CAAC,QAAQ,GAAG,OAAO,KAAK,OAAO,MAAM,QAAQ;CACjF,IAAI,QAAQ,WAAW,GACrB,OAAO;CAOT,OAJkB,QAAQ,MACvB,GAAG,OACF,OAAO,EAAE,QAAQ,YAAY,OAAO,EAAE,kBAAkB,YAAY,EAAE,cAAc,MAEjF,KAAa,QAAQ;AAC9B;AAEA,SAAgB,UAAU,SAAsB,MAAM,KAAK,IAAI,GAAY;CACzE,IAAI,CAAC,QAAQ,WACX,OAAO;CAET,MAAM,MAAM,KAAK,MAAM,QAAQ,SAAS;CACxC,IAAI,OAAO,MAAM,GAAG,GAClB,OAAO;CAET,OAAO,MAAM,mBAAmB;AAClC;;;;;AAMA,eAAsB,kBACpB,UACA,SACkD;CAClD,IAAI,IAAI,WAAY,MAAM,gBAAgB,QAAQ;CAClD,IAAI,EAAE,eAAe,CAAC,UAAU,CAAC,GAC/B,OAAO;EAAE,OAAO,EAAE;EAAa,SAAS;CAAE;CAE5C,IAAI,CAAC,EAAE,cACL,MAAM,IAAI,MAAM,2EAA2E;CAE7F,IAAI,MAAM,eAAe,UAAU,CAAC;CACpC,OAAO;EAAE,OAAO,EAAE;EAAa,SAAS;CAAE;AAC5C;AAEA,eAAsB,eAAe,UAAkB,SAA4C;CAKjG,OAAO,aACL,GAAG,SAAS,gBACZ,YAAY;EACV,MAAM,SAAS,MAAM,gBAAgB,QAAQ;EAC7C,IACE,OAAO,eAAe,QAAQ,eAC7B,OAAO,gBAAgB,QAAQ,eAAe,OAAO,iBAAiB,QAAQ,eAE/E,OAAO;EAET,OAAO,uBAAuB,UAAU,MAAM;CAChD,GACA,EAAE,UAAU,qBAAqB,WAAW,CAC9C;AACF;AAEA,eAAe,uBACb,UACA,SACsB;CACtB,MAAM,WAAW,MAAM,qBAAqB,QAAQ,UAAU;CAC9D,MAAM,OAAO,IAAI,gBAAgB;EAC/B,YAAY;EACZ,eAAe,QAAQ;EACvB,WAAW,QAAQ;CACrB,CAAC;CAED,MAAM,MAAM,MAAM,MAAM,UAAU;EAChC,QAAQ;EACR,SAAS,EAAE,gBAAgB,oCAAoC;EAC/D;CACF,CAAC;CAED,IAAI,CAAC,IAAI,IAAI;EACX,MAAM,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,YAAY,EAAE;EAC5C,MAAM,IAAI,MAAM,6BAA6B,IAAI,OAAO,KAAK,KAAK,MAAM,GAAG,GAAG,GAAG;CACnF;CAEA,MAAM,OAAQ,MAAM,IAAI,KAAK;CAM7B,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MAAM,6CAA6C;CAG/D,MAAM,YACJ,OAAO,KAAK,eAAe,WACvB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,aAAa,GAAI,CAAC,CAAC,YAAY,IAC1D,QAAQ;CAEd,MAAM,UAAuB;EAC3B,GAAG;EACH,aAAa,KAAK;EAClB,cAAc,KAAK,iBAAiB,QAAQ;EAC5C;EACA,KAAK;GACH,GAAG,QAAQ;GACX,KAAK,KAAK;GACV,eAAe,KAAK,iBAAiB,QAAQ;GAC7C,YAAY;EACd;CACF;CAEA,MAAM,aAAa,UAAU,OAAO;CACpC,OAAO;AACT;AAEA,eAAe,qBAAqB,QAAiC;CACnE,IAAI;EACF,MAAM,MAAM,MAAM,MAAM,GAAG,OAAO,QAAQ,OAAO,EAAE,EAAE,oCAAoC,EACvF,QAAQ,YAAY,QAAQ,GAAM,EACpC,CAAC;EACD,IAAI,IAAI,IAAI;GACV,MAAM,OAAQ,MAAM,IAAI,KAAK;GAC7B,IAAI,KAAK,gBACP,OAAO,KAAK;EAEhB;CACF,QAAQ,CAER;CACA,OAAO,GAAG,OAAO,QAAQ,OAAO,EAAE,EAAE;AACtC;AAEA,eAAe,aAAa,UAAkB,SAAqC;CACjF,IAAI,OAAqB,CAAC;CAC1B,IAAI,MAAM,WAAW,QAAQ,GAC3B,IAAI;EACF,OAAO,KAAK,MAAM,MAAM,SAAS,UAAU,MAAM,CAAC;CACpD,QAAQ;EACN,OAAO,CAAC;CACV;CAEF,KAAK,QAAQ,cAAc,QAAQ;CACnC,MAAM,cAAc,UAAU,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,EAAE,KAAK,GAAK;AAC3E"}

package/dist/providers/grok-proxy/main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/providers/grok-proxy/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../../src/providers/grok-proxy/main.ts"],"names":[],"mappings":""}

package/dist/providers/grok-proxy/main.js

@@ -0,0 +1,111 @@
+#!/usr/bin/env node
+import { expandHome } from "../../utils/fs.js";
+import { assertLoopbackHost } from "../../utils/network.js";
+import { installProxyShutdown } from "../proxy-shared.js";
+import { listenGrokProxy } from "./server.js";
+import { appendFileSync } from "node:fs";
+import { parseArgs } from "node:util";
+//#region src/providers/grok-proxy/main.ts
+/**
+* Detached entrypoint for the Grok compatibility proxy.
+* Spawned by GrokProvider.startProxy — not meant for direct end-user use
+* (though it works standalone for debugging).
+*
+* Usage:
+*   node dist/providers/grok-proxy/main.js --port 8080 --host 127.0.0.1 --auth-path ~/.grok/auth.json
+*/
+var { values } = parseArgs({
+	options: {
+		port: {
+			type: "string",
+			short: "p",
+			default: "8080"
+		},
+		host: {
+			type: "string",
+			default: "127.0.0.1"
+		},
+		"auth-path": {
+			type: "string",
+			default: ""
+		},
+		upstream: {
+			type: "string",
+			default: "https://cli-chat-proxy.grok.com"
+		},
+		"client-version": {
+			type: "string",
+			default: "0.2.101"
+		},
+		"proxy-token": {
+			type: "string",
+			default: ""
+		},
+		quiet: {
+			type: "boolean",
+			short: "q",
+			default: false
+		},
+		help: {
+			type: "boolean",
+			short: "h",
+			default: false
+		}
+	},
+	allowPositionals: true
+});
+if (values.help) {
+	process.stdout.write(`anypick-grok-proxy — OpenAI + Anthropic proxy using Grok CLI OIDC auth
+  OpenAI:    POST /v1/chat/completions  (Codex)
+  Anthropic: POST /v1/messages          (Claude Code)
+
+Options:
+  -p, --port <n>              Listen port (default 8080)
+      --host <host>           Listen host (default 127.0.0.1)
+      --auth-path <path>      Path to ~/.grok/auth.json
+      --upstream <url>        Upstream base (default https://cli-chat-proxy.grok.com)
+      --client-version <v>    x-grok-client-version header
+  -q, --quiet                 Less logging
+  -h, --help
+`);
+	process.exit(0);
+}
+var authPath = values["auth-path"] || process.env.GROK_AUTH_PATH || `${process.env.HOME ?? ""}/.grok/auth.json`;
+var port = Number(values.port);
+if (!Number.isInteger(port) || port < 0 || port > 65535) {
+	process.stderr.write(`Invalid port: ${values.port}\n`);
+	process.exit(1);
+}
+var host = values.host ?? "127.0.0.1";
+try {
+	assertLoopbackHost(host);
+} catch (err) {
+	process.stderr.write(`${err instanceof Error ? err.message : String(err)}\n`);
+	process.exit(1);
+}
+function log(line) {
+	const msg = `[grok-proxy] ${line}\n`;
+	process.stderr.write(msg);
+	if (process.env.ANYPICK_PROXY_LOG && process.stderr.isTTY) try {
+		appendFileSync(process.env.ANYPICK_PROXY_LOG, msg);
+	} catch {}
+}
+var { endpoint, server } = await listenGrokProxy({
+	host,
+	port,
+	authPath: expandHome(authPath),
+	upstream: values.upstream,
+	clientVersion: values["client-version"],
+	token: values["proxy-token"] || process.env.ANYPICK_PROXY_TOKEN || void 0,
+	quiet: values.quiet,
+	log: values.quiet ? () => {} : log
+});
+process.stdout.write(`anypick-grok-proxy listening on ${endpoint}\n`);
+log(`listening on ${endpoint}`);
+log(`auth: ${expandHome(authPath)}`);
+log(`upstream: ${values.upstream}`);
+installProxyShutdown(server);
+//#endregion
+export {};
+
+//# sourceMappingURL=main.js.map

package/dist/providers/grok-proxy/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","names":[],"sources":["../../../src/providers/grok-proxy/main.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * Detached entrypoint for the Grok compatibility proxy.\n * Spawned by GrokProvider.startProxy — not meant for direct end-user use\n * (though it works standalone for debugging).\n *\n * Usage:\n *   node dist/providers/grok-proxy/main.js --port 8080 --host 127.0.0.1 --auth-path ~/.grok/auth.json\n */\nimport { parseArgs } from 'node:util';\nimport { appendFileSync } from 'node:fs';\nimport { expandHome } from '../../utils/fs';\nimport { listenGrokProxy } from './server';\nimport { assertLoopbackHost } from '../../utils/network';\nimport { installProxyShutdown } from '../proxy-shared';\n\nconst { values } = parseArgs({\n  options: {\n    port: { type: 'string', short: 'p', default: '8080' },\n    host: { type: 'string', default: '127.0.0.1' },\n    'auth-path': { type: 'string', default: '' },\n    upstream: { type: 'string', default: 'https://cli-chat-proxy.grok.com' },\n    'client-version': { type: 'string', default: '0.2.101' },\n    'proxy-token': { type: 'string', default: '' },\n    quiet: { type: 'boolean', short: 'q', default: false },\n    help: { type: 'boolean', short: 'h', default: false },\n  },\n  allowPositionals: true,\n});\n\nif (values.help) {\n  process.stdout.write(`anypick-grok-proxy — OpenAI + Anthropic proxy using Grok CLI OIDC auth\n  OpenAI:    POST /v1/chat/completions  (Codex)\n  Anthropic: POST /v1/messages          (Claude Code)\n\nOptions:\n  -p, --port <n>              Listen port (default 8080)\n      --host <host>           Listen host (default 127.0.0.1)\n      --auth-path <path>      Path to ~/.grok/auth.json\n      --upstream <url>        Upstream base (default https://cli-chat-proxy.grok.com)\n      --client-version <v>    x-grok-client-version header\n  -q, --quiet                 Less logging\n  -h, --help\n`);\n  process.exit(0);\n}\n\nconst authPath =\n  values['auth-path'] || process.env.GROK_AUTH_PATH || `${process.env.HOME ?? ''}/.grok/auth.json`;\n\nconst port = Number(values.port);\nif (!Number.isInteger(port) || port < 0 || port > 65535) {\n  process.stderr.write(`Invalid port: ${values.port}\\n`);\n  process.exit(1);\n}\n\nconst host = values.host ?? '127.0.0.1';\ntry {\n  assertLoopbackHost(host);\n} catch (err) {\n  process.stderr.write(`${err instanceof Error ? err.message : String(err)}\\n`);\n  process.exit(1);\n}\n\nfunction log(line: string): void {\n  const msg = `[grok-proxy] ${line}\\n`;\n  process.stderr.write(msg);\n  // Detached proxies already have stderr redirected to this file.\n  if (process.env.ANYPICK_PROXY_LOG && process.stderr.isTTY) {\n    try {\n      appendFileSync(process.env.ANYPICK_PROXY_LOG, msg);\n    } catch {\n      // ignore\n    }\n  }\n}\n\nconst { endpoint, server } = await listenGrokProxy({\n  host,\n  port,\n  authPath: expandHome(authPath),\n  upstream: values.upstream,\n  clientVersion: values['client-version'],\n  token: values['proxy-token'] || process.env.ANYPICK_PROXY_TOKEN || undefined,\n  quiet: values.quiet,\n  log: values.quiet ? () => {} : log,\n});\n\n// Single-line marker the parent can scrape if needed\nprocess.stdout.write(`anypick-grok-proxy listening on ${endpoint}\\n`);\nlog(`listening on ${endpoint}`);\nlog(`auth: ${expandHome(authPath)}`);\nlog(`upstream: ${values.upstream}`);\n\ninstallProxyShutdown(server);\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,IAAM,EAAE,WAAW,UAAU;CAC3B,SAAS;EACP,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;EAAO;EACpD,MAAM;GAAE,MAAM;GAAU,SAAS;EAAY;EAC7C,aAAa;GAAE,MAAM;GAAU,SAAS;EAAG;EAC3C,UAAU;GAAE,MAAM;GAAU,SAAS;EAAkC;EACvE,kBAAkB;GAAE,MAAM;GAAU,SAAS;EAAU;EACvD,eAAe;GAAE,MAAM;GAAU,SAAS;EAAG;EAC7C,OAAO;GAAE,MAAM;GAAW,OAAO;GAAK,SAAS;EAAM;EACrD,MAAM;GAAE,MAAM;GAAW,OAAO;GAAK,SAAS;EAAM;CACtD;CACA,kBAAkB;AACpB,CAAC;AAED,IAAI,OAAO,MAAM;CACf,QAAQ,OAAO,MAAM;;;;;;;;;;;;CAYtB;CACC,QAAQ,KAAK,CAAC;AAChB;AAEA,IAAM,WACJ,OAAO,gBAAgB,QAAQ,IAAI,kBAAkB,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAEjF,IAAM,OAAO,OAAO,OAAO,IAAI;AAC/B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,OAAO;CACvD,QAAQ,OAAO,MAAM,iBAAiB,OAAO,KAAK,GAAG;CACrD,QAAQ,KAAK,CAAC;AAChB;AAEA,IAAM,OAAO,OAAO,QAAQ;AAC5B,IAAI;CACF,mBAAmB,IAAI;AACzB,SAAS,KAAK;CACZ,QAAQ,OAAO,MAAM,GAAG,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,GAAG;CAC5E,QAAQ,KAAK,CAAC;AAChB;AAEA,SAAS,IAAI,MAAoB;CAC/B,MAAM,MAAM,gBAAgB,KAAK;CACjC,QAAQ,OAAO,MAAM,GAAG;CAExB,IAAI,QAAQ,IAAI,qBAAqB,QAAQ,OAAO,OAClD,IAAI;EACF,eAAe,QAAQ,IAAI,mBAAmB,GAAG;CACnD,QAAQ,CAER;AAEJ;AAEA,IAAM,EAAE,UAAU,WAAW,MAAM,gBAAgB;CACjD;CACA;CACA,UAAU,WAAW,QAAQ;CAC7B,UAAU,OAAO;CACjB,eAAe,OAAO;CACtB,OAAO,OAAO,kBAAkB,QAAQ,IAAI,uBAAuB,KAAA;CACnE,OAAO,OAAO;CACd,KAAK,OAAO,cAAc,CAAC,IAAI;AACjC,CAAC;AAGD,QAAQ,OAAO,MAAM,mCAAmC,SAAS,GAAG;AACpE,IAAI,gBAAgB,UAAU;AAC9B,IAAI,SAAS,WAAW,QAAQ,GAAG;AACnC,IAAI,aAAa,OAAO,UAAU;AAElC,qBAAqB,MAAM"}

package/dist/providers/grok-proxy/server.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Dual-protocol reverse proxy for Grok CLI OIDC sessions.
+ *
+ * Compatibility (same base URL for both clients):
+ *   • OpenAI   — Codex / OpenAI SDK  →  /v1/chat/completions, /v1/responses, /v1/models
+ *   • Anthropic — Claude Code         →  /v1/messages
+ *
+ * Upstream cli-chat-proxy.grok.com already speaks both shapes; we inject the
+ * CLI OIDC Bearer and forward. Model IDs and /v1/models are deliberately
+ * passed through without a local catalog, so newly released models work
+ * without a AnyPick update. Optional translate mode
+ * (GROK_PROXY_TRANSLATE_ANTHROPIC=1) rewrites Anthropic → chat/completions
+ * for OpenAI-only upstreams.
+ *
+ * Clients point BASE_URL here with any dummy API key / auth token.
+ */
+import { type Server } from 'node:http';
+export interface GrokProxyServerOptions {
+    host: string;
+    port: number;
+    authPath: string;
+    upstream?: string;
+    clientVersion?: string;
+    /**
+     * When true, POST /v1/messages is translated to OpenAI chat/completions
+     * instead of passed through. Default: false (native Anthropic upstream).
+     * Also enabled by env GROK_PROXY_TRANSLATE_ANTHROPIC=1.
+     */
+    translateAnthropic?: boolean;
+    /** Per-instance high-entropy secret (PROXY-01) required on credentialed routes. */
+    token?: string;
+    /** Append request traces to this logger. */
+    log?: (line: string) => void;
+    quiet?: boolean;
+}
+export declare function createGrokProxyServer(opts: GrokProxyServerOptions): Server;
+/** Canonical ids from the static map (unique, stable order). */
+export declare function staticGrokModelIds(): string[];
+/** Accept OpenAI `{ data:[{id}] }`, `{ models:[] }`, or a bare string array. */
+export declare function modelIdsFromCatalogBody(text: string): string[];
+export declare function listenGrokProxy(opts: GrokProxyServerOptions): Promise<{
+    server: Server;
+    endpoint: string;
+    port: number;
+}>;
+//# sourceMappingURL=server.d.ts.map

package/dist/providers/grok-proxy/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/providers/grok-proxy/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAgBjG,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAOD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CA+d1E;AAiPD,gEAAgE;AAChE,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAE7C;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAuC9D;AAwCD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAc7D"}