anyray-connect 0.1.0

package/dist/tools/claudeCode.js

@@ -0,0 +1,131 @@
+/**
+ * Claude Code adapter — fully automatic.
+ *
+ * Claude Code loads an `env` block from `~/.claude/settings.json` and honors
+ * `ANTHROPIC_BASE_URL`, a bearer token via `ANTHROPIC_AUTH_TOKEN`, and extra
+ * request headers via `ANTHROPIC_CUSTOM_HEADERS`. We point the base URL at the
+ * gateway and stamp `x-anyray-metadata` for content-free spend attribution. We
+ * also pin `x-anyray-provider: anthropic` so it works even before an org-wide
+ * default provider is configured.
+ *
+ * Auth depends on the target's `authMode`:
+ *  - `placeholder` (default): send the dev's personal gateway key
+ *    (`target.clientKey`, from an invite) when present, else the shared
+ *    placeholder; the gateway swaps in the server-held provider key (API
+ *    billing).
+ *  - `subscription`: write NO auth token, so Claude Code keeps its own seat
+ *    sign-in (Pro/Max/Team/Enterprise) and sends the OAuth token itself; we add
+ *    `x-anyray-auth-mode: passthrough` so the gateway forwards that token to
+ *    Anthropic instead of injecting the org key. Spend stays on the seat. A
+ *    personal gateway key, if present, rides `x-anyray-api-key`.
+ *
+ * We only own these keys — any other settings/env the user has are preserved.
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { readJson, writeJson, fileExists } from '../util/jsonFile.js';
+import { metadataHeaderValue } from '../types.js';
+const settingsPath = () => join(homedir(), '.claude', 'settings.json');
+const OWNED_KEYS = [
+    'ANTHROPIC_BASE_URL',
+    'ANTHROPIC_AUTH_TOKEN',
+    'ANTHROPIC_CUSTOM_HEADERS',
+];
+const customHeaders = (meta, subscription, clientKey) => {
+    const lines = ['x-anyray-provider: anthropic'];
+    if (subscription) {
+        lines.push('x-anyray-auth-mode: passthrough');
+        // The seat OAuth token owns Authorization, so the personal gateway key
+        // rides its own header for the gateway to identify the dev.
+        if (clientKey)
+            lines.push(`x-anyray-api-key: ${clientKey}`);
+    }
+    if (meta)
+        lines.push(`x-anyray-metadata: ${meta}`);
+    return lines.join('\n');
+};
+export const claudeCode = {
+    id: 'claude-code',
+    title: 'Claude Code',
+    automatic: true,
+    async detect() {
+        const path = join(homedir(), '.claude');
+        const installed = await fileExists(path);
+        return {
+            installed,
+            detail: installed ? settingsPath() : 'no ~/.claude directory',
+        };
+    },
+    async apply(target, opts) {
+        const path = settingsPath();
+        const subscription = target.authMode === 'subscription';
+        const meta = metadataHeaderValue(target.metadata);
+        const env = {
+            ANTHROPIC_BASE_URL: target.anthropicBaseUrl,
+            ANTHROPIC_CUSTOM_HEADERS: customHeaders(meta, subscription, target.clientKey),
+            // Placeholder mode sends the dev's personal gateway key when one was
+            // issued, else the shared placeholder, for the gateway to swap;
+            // subscription mode must NOT set one — any ANTHROPIC_AUTH_TOKEN would
+            // override the seat's OAuth sign-in and silently move spend onto API
+            // billing (the personal key rides x-anyray-api-key there instead).
+            ...(subscription
+                ? {}
+                : { ANTHROPIC_AUTH_TOKEN: target.clientKey ?? target.placeholderKey }),
+        };
+        const messages = [
+            `${path} → env.ANTHROPIC_BASE_URL = ${target.anthropicBaseUrl}`,
+            subscription
+                ? `Subscription mode: Claude Code keeps your seat sign-in; its OAuth token passes through the gateway (never stored).${target.clientKey
+                    ? ' Your personal gateway key rides x-anyray-api-key.'
+                    : ''}`
+                : target.clientKey
+                    ? 'Auth: personal gateway key (written to the config, not shown here)'
+                    : `Auth: placeholder token (gateway swaps in the server-held key)`,
+            `Attribution: ${meta ?? '(none)'}`,
+            'Restart Claude Code (or open a new session) to pick up the change.',
+        ];
+        if (opts.dryRun)
+            return { status: 'configured', messages };
+        const settings = await readJson(path);
+        const existingEnv = settings.env ?? {};
+        settings.env = { ...existingEnv, ...env };
+        if (subscription) {
+            // A leftover token (ours or hand-set) would defeat seat auth — drop it.
+            if (existingEnv.ANTHROPIC_AUTH_TOKEN) {
+                messages.push('Removed env.ANTHROPIC_AUTH_TOKEN — it would override your subscription sign-in.');
+            }
+            delete settings.env.ANTHROPIC_AUTH_TOKEN;
+        }
+        await writeJson(path, settings);
+        return { status: 'configured', messages, changedFiles: [path] };
+    },
+    async revert(opts) {
+        const path = settingsPath();
+        if (!(await fileExists(path))) {
+            return { status: 'not-found', messages: ['nothing to revert'] };
+        }
+        if (opts.dryRun) {
+            return {
+                status: 'reverted',
+                messages: [`would remove Anyray keys from ${path}`],
+            };
+        }
+        const settings = await readJson(path);
+        const env = settings.env;
+        if (env) {
+            for (const key of OWNED_KEYS)
+                delete env[key];
+            if (Object.keys(env).length === 0)
+                delete settings.env;
+            await writeJson(path, settings);
+        }
+        const messages = [`removed Anyray keys from ${path}`];
+        // Revert only deletes our keys; if apply overwrote a pre-existing value
+        // (e.g. you already set ANTHROPIC_BASE_URL), point at the backup.
+        if (await fileExists(`${path}.anyray-bak`)) {
+            messages.push(`Pre-Anyray backup at ${path}.anyray-bak (restore for a full revert).`);
+        }
+        return { status: 'reverted', messages, changedFiles: [path] };
+    },
+};
+//# sourceMappingURL=claudeCode.js.map

package/dist/tools/claudeCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCode.js","sourceRoot":"","sources":["../../src/tools/claudeCode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,YAAY,GAAG,GAAW,EAAE,CAChC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAE9C,MAAM,UAAU,GAAG;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,0BAA0B;CAClB,CAAC;AAEX,MAAM,aAAa,GAAG,CACpB,IAAwB,EACxB,YAAqB,EACrB,SAA6B,EACrB,EAAE;IACV,MAAM,KAAK,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC/C,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,uEAAuE;QACvE,4DAA4D;QAC5D,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,aAAa;IACpB,SAAS,EAAE,IAAI;IAEf,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,SAAS;YACT,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,wBAAwB;SAC9D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,MAAqB,EACrB,IAAkB;QAElB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,cAAc,CAAC;QACxD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,GAAG,GAA2B;YAClC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;YAC3C,wBAAwB,EAAE,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC;YAC7E,qEAAqE;YACrE,gEAAgE;YAChE,sEAAsE;YACtE,qEAAqE;YACrE,mEAAmE;YACnE,GAAG,CAAC,YAAY;gBACd,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;SACzE,CAAC;QAEF,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,+BAA+B,MAAM,CAAC,gBAAgB,EAAE;YAC/D,YAAY;gBACV,CAAC,CAAC,qHACE,MAAM,CAAC,SAAS;oBACd,CAAC,CAAC,oDAAoD;oBACtD,CAAC,CAAC,EACN,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,SAAS;oBAChB,CAAC,CAAC,oEAAoE;oBACtE,CAAC,CAAC,gEAAgE;YACtE,gBAAgB,IAAI,IAAI,QAAQ,EAAE;YAClC,oEAAoE;SACrE,CAAC;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,WAAW,GACd,QAAQ,CAAC,GAA0C,IAAI,EAAE,CAAC;QAC7D,QAAQ,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,GAAG,EAAE,CAAC;QAC1C,IAAI,YAAY,EAAE,CAAC;YACjB,wEAAwE;YACxE,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CACX,iFAAiF,CAClF,CAAC;YACJ,CAAC;YACD,OAAQ,QAAQ,CAAC,GAA8B,CAAC,oBAAoB,CAAC;QACvE,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEhC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAkB;QAC7B,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAClE,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,CAAC,iCAAiC,IAAI,EAAE,CAAC;aACpD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAyC,CAAC;QAC/D,IAAI,GAAG,EAAE,CAAC;YACR,KAAK,MAAM,GAAG,IAAI,UAAU;gBAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC;YACvD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QACtD,wEAAwE;QACxE,kEAAkE;QAClE,IAAI,MAAM,UAAU,CAAC,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,wBAAwB,IAAI,0CAA0C,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAChE,CAAC;CACF,CAAC"}

package/dist/tools/codex.js

@@ -0,0 +1,220 @@
+/**
+ * Codex CLI adapter — fully automatic.
+ *
+ * Codex (OpenAI's CLI) reaches a backend through a `[model_providers.<id>]`
+ * entry. We register an `anyray` provider pointed at the gateway and select it
+ * with a named profile, so a dev opts in with `codex --profile anyray` while
+ * their default Codex config stays untouched.
+ *
+ * Profile format (Codex 0.139+): a named profile lives in its OWN file,
+ * `~/.codex/<name>.config.toml`, with flat top-level keys — NOT an inline
+ * `[profiles.<name>]` table in `config.toml` (0.139 rejects the legacy table).
+ * We own the whole `anyray.config.toml` file; `config.toml` is never touched
+ * except to strip a legacy block left by an older connect (migration). Omitted
+ * keys inherit the dev's base `config.toml`.
+ *
+ * The only supported wire protocol is the OpenAI *Responses* API
+ * (`wire_api = "responses"`), so we target the gateway's `/v1/responses`. In
+ * placeholder mode auth rides as a static `Authorization` header carrying the
+ * dev's personal gateway key (`clientKey`, from an invite) or the shared
+ * placeholder (the gateway swaps in the real provider key), and
+ * `x-anyray-metadata` carries content-free spend attribution.
+ *
+ * Subscription mode (`authMode: 'subscription'`, ChatGPT Plus/Pro/Team seats):
+ * the provider sets `requires_openai_auth = true` and NO static Authorization
+ * header, so Codex attaches its own ChatGPT sign-in per request
+ * (`Authorization: Bearer <access token>` + `ChatGPT-Account-ID`) — Codex uses
+ * a configured `base_url` verbatim even with ChatGPT auth. The gateway runs in
+ * pass-through (`x-anyray-auth-mode: passthrough`) and re-targets the upstream
+ * at the ChatGPT Codex backend (`x-anyray-custom-host`), forwarding the
+ * account-id and the Codex client headers (`x-anyray-forward-headers`) so the
+ * backend still sees a genuine Codex request, and spend stays on the seat. No
+ * model line is written (the seat backend only accepts real Codex models), so
+ * the profile inherits the dev's working default model from `config.toml`.
+ *
+ * Set `ANYRAY_CODEX_MODEL` to pin a specific model id, and (placeholder mode
+ * only) `ANYRAY_CODEX_PROVIDER` to pin `x-anyray-provider`.
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { writeFile, rm } from 'node:fs/promises';
+import { fileExists } from '../util/jsonFile.js';
+import { removeProfileBlock } from '../util/profile.js';
+import { metadataHeaderValue } from '../types.js';
+/** Model Codex sends when ANYRAY_CODEX_MODEL is unset; the gateway's default
+ *  routing decides the real model/provider, so this is just a required token. */
+const DEFAULT_MODEL = 'anyray-default';
+/** Default intent stamped on Codex traffic so it's filterable (intent:codex)
+ *  and labelled in the console; override with ANYRAY_CODEX_INTENT(_LABEL) or the
+ *  global --intent. */
+const DEFAULT_INTENT = 'codex';
+const DEFAULT_INTENT_LABEL = 'Codex CLI';
+/** Where ChatGPT-subscription Codex traffic actually lives — seat OAuth tokens
+ *  are only valid against this backend, never api.openai.com. */
+const CHATGPT_CODEX_BACKEND = 'https://chatgpt.com/backend-api/codex';
+/** Headers Codex actually sends with ChatGPT auth (observed on the wire) that
+ *  the backend needs to recognise a genuine Codex client and route the seat;
+ *  the gateway only forwards headers named in x-anyray-forward-headers. All
+ *  content-free (account id, client identity/UA, per-session grouping ids). */
+const SUBSCRIPTION_FORWARD_HEADERS = 'chatgpt-account-id,originator,session_id,user-agent,x-codex-turn-metadata,x-codex-window-id,x-client-request-id';
+/** `$CODEX_HOME` overrides the default `~/.codex` (Codex honors it too). */
+const codexHome = () => process.env.CODEX_HOME?.trim() || join(homedir(), '.codex');
+/** Base config (untouched except for legacy-block cleanup) and our own profile
+ *  file. The profile NAME is the file stem: `anyray.config.toml` → `anyray`. */
+const baseConfigPath = () => join(codexHome(), 'config.toml');
+const profilePath = () => join(codexHome(), 'anyray.config.toml');
+/**
+ * The `x-anyray-metadata` value for Codex: the resolved attribution (user/team/
+ * session/intent from CLI flags or env) plus a Codex-specific `intent` default
+ * so every Codex request is tagged even when the operator didn't pass one. The
+ * header is static, so `session` is a stable grouping label, not per-conversation.
+ */
+const codexMetadata = (target) => metadataHeaderValue({
+    ...target.metadata,
+    intent: process.env.ANYRAY_CODEX_INTENT?.trim() ||
+        target.metadata.intent ||
+        DEFAULT_INTENT,
+    intentLabel: process.env.ANYRAY_CODEX_INTENT_LABEL?.trim() ||
+        target.metadata.intentLabel ||
+        DEFAULT_INTENT_LABEL,
+});
+/** Escape a string for a TOML basic (double-quoted) string. */
+const tomlString = (value) => `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+/** The model the profile pins, or undefined to inherit the base config's model.
+ *  Subscription seats must use a real Codex model, so we never pin `anyray-default`
+ *  there — we inherit the dev's working default instead. */
+const resolveModel = (subscription) => {
+    const explicit = process.env.ANYRAY_CODEX_MODEL?.trim();
+    if (explicit)
+        return explicit;
+    return subscription ? undefined : DEFAULT_MODEL;
+};
+/** Full contents of the standalone profile file (flat top-level keys). */
+const profileFile = (target) => {
+    const meta = codexMetadata(target);
+    const subscription = target.authMode === 'subscription';
+    // Subscription traffic is ChatGPT-backend-only — the provider pin is not
+    // the operator's call there, so ANYRAY_CODEX_PROVIDER applies only to
+    // placeholder mode.
+    const provider = subscription
+        ? 'openai'
+        : process.env.ANYRAY_CODEX_PROVIDER?.trim();
+    const model = resolveModel(subscription);
+    // Placeholder mode: the dev's personal gateway key (from an invite), else
+    // the shared placeholder, is the bearer. Subscription mode: the seat OAuth
+    // token owns Authorization, so the personal key rides x-anyray-api-key.
+    const headers = subscription
+        ? [
+            // No static Authorization: requires_openai_auth makes Codex attach its
+            // ChatGPT sign-in (Bearer access token + ChatGPT-Account-ID) itself.
+            `"x-anyray-auth-mode" = "passthrough"`,
+            `"x-anyray-custom-host" = ${tomlString(CHATGPT_CODEX_BACKEND)}`,
+            `"x-anyray-forward-headers" = ${tomlString(SUBSCRIPTION_FORWARD_HEADERS)}`,
+            ...(target.clientKey
+                ? [`"x-anyray-api-key" = ${tomlString(target.clientKey)}`]
+                : []),
+        ]
+        : [
+            `"Authorization" = ${tomlString(`Bearer ${target.clientKey ?? target.placeholderKey}`)}`,
+        ];
+    if (meta)
+        headers.push(`"x-anyray-metadata" = ${tomlString(meta)}`);
+    if (provider)
+        headers.push(`"x-anyray-provider" = ${tomlString(provider)}`);
+    const lines = [
+        '# Anyray gateway profile for Codex 0.139+ (a standalone profile file).',
+        '# Managed by anyray-connect — the whole file is owned by the tool.',
+        '# Use with:  codex --profile anyray',
+        ...(model ? [`model = ${tomlString(model)}`] : []),
+        'model_provider = "anyray"',
+        '',
+        '[model_providers.anyray]',
+        'name = "Anyray Gateway"',
+        `base_url = ${tomlString(target.openaiBaseUrl)}`,
+        'wire_api = "responses"',
+        ...(subscription ? ['requires_openai_auth = true'] : []),
+        `http_headers = { ${headers.join(', ')} }`,
+    ];
+    return lines.join('\n') + '\n';
+};
+export const codex = {
+    id: 'codex',
+    title: 'Codex CLI',
+    automatic: true,
+    async detect() {
+        const home = codexHome();
+        const installed = await fileExists(home);
+        return {
+            installed,
+            detail: installed ? profilePath() : `no ${home} directory`,
+        };
+    },
+    async apply(target, opts) {
+        const path = profilePath();
+        const meta = codexMetadata(target);
+        const subscription = target.authMode === 'subscription';
+        const model = resolveModel(subscription);
+        const messages = [
+            `${path} ← standalone Codex profile (model_provider = anyray)`,
+            `Base URL: ${target.openaiBaseUrl}/responses  (wire_api = responses)`,
+            subscription
+                ? 'Subscription mode: Codex keeps your ChatGPT sign-in; its OAuth token passes through the gateway to the ChatGPT backend (never stored). Requires being signed in with ChatGPT, not an API key.'
+                : `Model: ${model}${process.env.ANYRAY_CODEX_MODEL
+                    ? ''
+                    : '  (default — set ANYRAY_CODEX_MODEL to target a specific model)'}`,
+            ...(subscription && !process.env.ANYRAY_CODEX_MODEL
+                ? [
+                    'Model: inherits your config.toml default (the seat backend only accepts real Codex models).',
+                ]
+                : []),
+            `Attribution: ${meta ?? '(none — pass --user)'}`,
+            'Run Codex through the gateway with:  codex --profile anyray',
+            '(Plain `codex` keeps your existing default config.)',
+        ];
+        if (opts.dryRun)
+            return { status: 'configured', messages };
+        // Write our standalone profile file (we own it whole), then strip any
+        // legacy inline block a pre-0.139 connect left in config.toml so the two
+        // can't collide (Codex 0.139 errors on a leftover [profiles.anyray] table).
+        await writeFile(path, profileFile(target));
+        const migrated = await removeProfileBlock(baseConfigPath());
+        if (migrated) {
+            messages.push(`Migrated: removed the legacy [profiles.anyray] block from ${baseConfigPath()}.`);
+        }
+        return { status: 'configured', messages, changedFiles: [path] };
+    },
+    async revert(opts) {
+        const path = profilePath();
+        const hasProfile = await fileExists(path);
+        // Also clean up any legacy inline block left in config.toml by old versions.
+        const base = baseConfigPath();
+        const hasLegacy = (await fileExists(base))
+            ? await (async () => {
+                if (opts.dryRun) {
+                    const { readFile } = await import('node:fs/promises');
+                    return (await readFile(base, 'utf-8')).includes('# >>> anyray connect >>>');
+                }
+                return removeProfileBlock(base);
+            })()
+            : false;
+        if (!hasProfile && !hasLegacy) {
+            return { status: 'not-found', messages: ['nothing to revert'] };
+        }
+        const changed = [];
+        const messages = [];
+        if (hasProfile) {
+            if (!opts.dryRun)
+                await rm(path, { force: true });
+            changed.push(path);
+            messages.push(opts.dryRun ? `would remove ${path}` : `removed ${path}`);
+        }
+        if (hasLegacy) {
+            changed.push(base);
+            messages.push(opts.dryRun
+                ? `would remove the legacy Anyray block from ${base}`
+                : `removed the legacy Anyray block from ${base}`);
+        }
+        return { status: 'reverted', messages, changedFiles: changed };
+    },
+};
+//# sourceMappingURL=codex.js.map

package/dist/tools/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/tools/codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAQxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;iFACiF;AACjF,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC;;uBAEuB;AACvB,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC;iEACiE;AACjE,MAAM,qBAAqB,GAAG,uCAAuC,CAAC;AAEtE;;;+EAG+E;AAC/E,MAAM,4BAA4B,GAChC,iHAAiH,CAAC;AAEpH,4EAA4E;AAC5E,MAAM,SAAS,GAAG,GAAW,EAAE,CAC7B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAE9D;gFACgF;AAChF,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AACtE,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,oBAAoB,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,aAAa,GAAG,CAAC,MAAqB,EAAsB,EAAE,CAClE,mBAAmB,CAAC;IAClB,GAAG,MAAM,CAAC,QAAQ;IAClB,MAAM,EACJ,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,MAAM,CAAC,QAAQ,CAAC,MAAM;QACtB,cAAc;IAChB,WAAW,EACT,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE;QAC7C,MAAM,CAAC,QAAQ,CAAC,WAAW;QAC3B,oBAAoB;CACvB,CAAC,CAAC;AAEL,+DAA+D;AAC/D,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAE3D;;4DAE4D;AAC5D,MAAM,YAAY,GAAG,CAAC,YAAqB,EAAsB,EAAE;IACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;AAClD,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,GAAG,CAAC,MAAqB,EAAU,EAAE;IACpD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,cAAc,CAAC;IACxD,yEAAyE;IACzE,sEAAsE;IACtE,oBAAoB;IACpB,MAAM,QAAQ,GAAG,YAAY;QAC3B,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAEzC,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,OAAO,GAAa,YAAY;QACpC,CAAC,CAAC;YACE,uEAAuE;YACvE,qEAAqE;YACrE,sCAAsC;YACtC,4BAA4B,UAAU,CAAC,qBAAqB,CAAC,EAAE;YAC/D,gCAAgC,UAAU,CAAC,4BAA4B,CAAC,EAAE;YAC1E,GAAG,CAAC,MAAM,CAAC,SAAS;gBAClB,CAAC,CAAC,CAAC,wBAAwB,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1D,CAAC,CAAC,EAAE,CAAC;SACR;QACH,CAAC,CAAC;YACE,qBAAqB,UAAU,CAC7B,UAAU,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,EAAE,CACtD,EAAE;SACJ,CAAC;IACN,IAAI,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpE,IAAI,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG;QACZ,wEAAwE;QACxE,oEAAoE;QACpE,qCAAqC;QACrC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,2BAA2B;QAC3B,EAAE;QACF,0BAA0B;QAC1B,yBAAyB;QACzB,cAAc,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;QAChD,wBAAwB;QACxB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;KAC3C,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAgB;IAChC,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,IAAI;IAEf,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,SAAS;YACT,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,YAAY;SAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAqB,EAAE,IAAkB;QACnD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,cAAc,CAAC;QACxD,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,uDAAuD;YAC9D,aAAa,MAAM,CAAC,aAAa,oCAAoC;YACrE,YAAY;gBACV,CAAC,CAAC,+LAA+L;gBACjM,CAAC,CAAC,UAAU,KAAK,GACb,OAAO,CAAC,GAAG,CAAC,kBAAkB;oBAC5B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,iEACN,EAAE;YACN,GAAG,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB;gBACjD,CAAC,CAAC;oBACE,6FAA6F;iBAC9F;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,gBAAgB,IAAI,IAAI,sBAAsB,EAAE;YAChD,6DAA6D;YAC7D,qDAAqD;SACtD,CAAC;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QAE3D,sEAAsE;QACtE,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,CAAC,CAAC;QAC5D,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CACX,6DAA6D,cAAc,EAAE,GAAG,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAkB;QAC7B,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1C,6EAA6E;QAC7E,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;gBAChB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBACtD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAC7C,0BAA0B,CAC3B,CAAC;gBACJ,CAAC;gBACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC,CAAC,EAAE;YACN,CAAC,CAAC,KAAK,CAAC;QAEV,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,QAAQ,CAAC,IAAI,CACX,IAAI,CAAC,MAAM;gBACT,CAAC,CAAC,6CAA6C,IAAI,EAAE;gBACrD,CAAC,CAAC,wCAAwC,IAAI,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IACjE,CAAC;CACF,CAAC"}

package/dist/tools/index.js

@@ -0,0 +1,20 @@
+/**
+ * Tool-adapter registry.
+ *
+ * Adapters are CODE modules registered here by id. The CLI iterates this list —
+ * it never special-cases a tool. To support a new tool: write an adapter under
+ * this folder and add one line below. Mirrors the optimizer's strategy REGISTRY.
+ */
+import { claudeCode } from './claudeCode.js';
+import { codex } from './codex.js';
+import { shellEnv } from './shellEnv.js';
+import { cursor, windsurf } from './manual.js';
+export const REGISTRY = [
+    claudeCode,
+    codex,
+    cursor,
+    windsurf,
+    shellEnv,
+];
+export const byId = (id) => REGISTRY.find((t) => t.id === id);
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,CAAC,MAAM,QAAQ,GAAkB;IACrC,UAAU;IACV,KAAK;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,EAAU,EAA2B,EAAE,CAC1D,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC"}

package/dist/tools/manual.js

@@ -0,0 +1,73 @@
+/**
+ * Manual adapters for tools whose config lives in app state we shouldn't script
+ * (Cursor, Windsurf). We detect whether the app is installed and print precise
+ * UI steps; we never write their internal state. Honest about the boundary —
+ * an automatic adapter can replace one of these later without touching the CLI.
+ */
+import { homedir, platform } from 'node:os';
+import { join } from 'node:path';
+import { fileExists } from '../util/jsonFile.js';
+import { metadataHeaderValue } from '../types.js';
+/** Per-OS app-support directories where these editors keep their config. */
+const appSupportDirs = (appDir) => {
+    const home = homedir();
+    switch (platform()) {
+        case 'darwin':
+            return [join(home, 'Library', 'Application Support', appDir)];
+        case 'win32':
+            return [join(process.env.APPDATA ?? join(home, 'AppData', 'Roaming'), appDir)];
+        default:
+            return [join(home, '.config', appDir)];
+    }
+};
+const makeManualAdapter = (spec) => ({
+    id: spec.id,
+    title: spec.title,
+    automatic: false,
+    async detect() {
+        for (const dir of appSupportDirs(spec.appDir)) {
+            if (await fileExists(dir))
+                return { installed: true, detail: dir };
+        }
+        return { installed: false, detail: `${spec.appDir} not found` };
+    },
+    async apply(target) {
+        return { status: 'manual', messages: spec.steps(target) };
+    },
+    async revert(_opts) {
+        return {
+            status: 'manual',
+            messages: [
+                `${spec.title}: clear the custom OpenAI base URL / key in its settings to revert.`,
+            ],
+        };
+    },
+});
+const openAiStyleSteps = (settingsLabel) => (target) => {
+    const meta = metadataHeaderValue(target.metadata);
+    // Manual tools need the value to paste in, so a personal gateway key is
+    // shown in full here — that's the only way it lands in the tool's config.
+    return [
+        `Open ${settingsLabel} and enable a custom OpenAI base URL:`,
+        `  • Base URL: ${target.openaiBaseUrl}`,
+        target.clientKey
+            ? `  • API key:  ${target.clientKey}  (your personal gateway key — keep it private)`
+            : `  • API key:  ${target.placeholderKey}  (placeholder — the gateway holds the real key)`,
+        meta
+            ? `  • If it allows custom headers, add: x-anyray-metadata: ${meta}`
+            : '  • (No attribution metadata resolved; set --user to attribute spend.)',
+    ];
+};
+export const cursor = makeManualAdapter({
+    id: 'cursor',
+    title: 'Cursor',
+    appDir: 'Cursor',
+    steps: openAiStyleSteps('Cursor → Settings → Models → OpenAI API Key'),
+});
+export const windsurf = makeManualAdapter({
+    id: 'windsurf',
+    title: 'Windsurf',
+    appDir: 'Windsurf',
+    steps: openAiStyleSteps('Windsurf → Settings → model provider / OpenAI'),
+});
+//# sourceMappingURL=manual.js.map

package/dist/tools/manual.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manual.js","sourceRoot":"","sources":["../../src/tools/manual.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AASlD,4EAA4E;AAC5E,MAAM,cAAc,GAAG,CAAC,MAAc,EAAY,EAAE;IAClD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,QAAQ,QAAQ,EAAE,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,KAAK,OAAO;YACV,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF;YACE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC,CAAC;AASF,MAAM,iBAAiB,GAAG,CAAC,IAAgB,EAAe,EAAE,CAAC,CAAC;IAC5D,EAAE,EAAE,IAAI,CAAC,EAAE;IACX,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,SAAS,EAAE,KAAK;IAEhB,KAAK,CAAC,MAAM;QACV,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAqB;QAC/B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAmB;QAC9B,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,KAAK,qEAAqE;aACnF;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,aAAqB,EAAE,EAAE,CAAC,CAClD,MAAqB,EACX,EAAE;IACZ,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,wEAAwE;IACxE,0EAA0E;IAC1E,OAAO;QACL,QAAQ,aAAa,uCAAuC;QAC5D,iBAAiB,MAAM,CAAC,aAAa,EAAE;QACvC,MAAM,CAAC,SAAS;YACd,CAAC,CAAC,iBAAiB,MAAM,CAAC,SAAS,iDAAiD;YACpF,CAAC,CAAC,iBAAiB,MAAM,CAAC,cAAc,kDAAkD;QAC5F,IAAI;YACF,CAAC,CAAC,4DAA4D,IAAI,EAAE;YACpE,CAAC,CAAC,wEAAwE;KAC7E,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,iBAAiB,CAAC;IACtC,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,gBAAgB,CAAC,6CAA6C,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;IACxC,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,gBAAgB,CAAC,+CAA+C,CAAC;CACzE,CAAC,CAAC"}

package/dist/tools/shellEnv.js

@@ -0,0 +1,77 @@
+/**
+ * Shell-env adapter — generic fallback for OpenAI/Anthropic SDKs, scripts, and
+ * CLIs (e.g. Codex) that read standard env vars.
+ *
+ * Writes a single managed block into the shell profile with both SDK families'
+ * base URLs and placeholder keys. The standard SDKs have no env for custom
+ * headers, so per-request `x-anyray-metadata` attribution isn't set here —
+ * attribution for these falls back to the gateway's defaults. Tools that DO
+ * support headers (Claude Code) have their own adapter.
+ */
+import { detectProfilePath, removeProfileBlock, upsertProfileBlock } from '../util/profile.js';
+import { fileExists } from '../util/jsonFile.js';
+import { maskKey } from '../util/redeem.js';
+// Single-quote the values: shells treat single-quoted strings literally, so a
+// `$`, backtick, or double-quote in a URL/key can't trigger expansion or break
+// out of the assignment. (Single quotes themselves can't appear in these.)
+// The exported key is the dev's personal gateway key (from an invite) when
+// present, else the shared placeholder.
+const envLines = (target, key) => [
+    `export OPENAI_BASE_URL='${target.openaiBaseUrl}'`,
+    `export OPENAI_API_KEY='${key}'`,
+    `export ANTHROPIC_BASE_URL='${target.anthropicBaseUrl}'`,
+    `export ANTHROPIC_AUTH_TOKEN='${key}'`,
+];
+export const shellEnv = {
+    id: 'shell-env',
+    title: 'Shell environment (SDKs, scripts, Codex)',
+    automatic: true,
+    async detect() {
+        const path = detectProfilePath();
+        return {
+            installed: true, // a profile can always be created
+            detail: (await fileExists(path)) ? path : `${path} (will be created)`,
+        };
+    },
+    async apply(target, opts) {
+        const path = detectProfilePath();
+        const key = target.clientKey ?? target.placeholderKey;
+        const lines = envLines(target, key);
+        // Console output masks a personal key (the file gets the real one) — a
+        // terminal/scrollback should never show the full credential.
+        const shownLines = target.clientKey
+            ? envLines(target, maskKey(target.clientKey))
+            : lines;
+        const messages = [
+            `${path} ← managed Anyray block`,
+            ...shownLines.map((l) => `  ${l}`),
+            `Run \`source ${path}\` or open a new terminal to apply.`,
+            'Note: standard SDK env vars carry no per-user header, so attribution',
+            'for these falls back to the gateway default.',
+        ];
+        if (opts.dryRun)
+            return { status: 'configured', messages };
+        await upsertProfileBlock(path, lines);
+        return { status: 'configured', messages, changedFiles: [path] };
+    },
+    async revert(opts) {
+        const path = detectProfilePath();
+        if (opts.dryRun) {
+            return {
+                status: 'reverted',
+                messages: [`would remove the Anyray block from ${path}`],
+            };
+        }
+        const removed = await removeProfileBlock(path);
+        return {
+            status: removed ? 'reverted' : 'not-found',
+            messages: [
+                removed
+                    ? `removed the Anyray block from ${path}`
+                    : `no Anyray block found in ${path}`,
+            ],
+            changedFiles: removed ? [path] : undefined,
+        };
+    },
+};
+//# sourceMappingURL=shellEnv.js.map

package/dist/tools/shellEnv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellEnv.js","sourceRoot":"","sources":["../../src/tools/shellEnv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAS5C,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,wCAAwC;AACxC,MAAM,QAAQ,GAAG,CAAC,MAAqB,EAAE,GAAW,EAAY,EAAE,CAAC;IACjE,2BAA2B,MAAM,CAAC,aAAa,GAAG;IAClD,0BAA0B,GAAG,GAAG;IAChC,8BAA8B,MAAM,CAAC,gBAAgB,GAAG;IACxD,gCAAgC,GAAG,GAAG;CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAgB;IACnC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,0CAA0C;IACjD,SAAS,EAAE,IAAI;IAEf,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,OAAO;YACL,SAAS,EAAE,IAAI,EAAE,kCAAkC;YACnD,MAAM,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,oBAAoB;SACtE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,MAAqB,EACrB,IAAkB;QAElB,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC;QACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,uEAAuE;QACvE,6DAA6D;QAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS;YACjC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7C,CAAC,CAAC,KAAK,CAAC;QACV,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,yBAAyB;YAChC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,gBAAgB,IAAI,qCAAqC;YACzD,sEAAsE;YACtE,8CAA8C;SAC/C,CAAC;QACF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QAE3D,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAkB;QAC7B,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,CAAC,sCAAsC,IAAI,EAAE,CAAC;aACzD,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;YAC1C,QAAQ,EAAE;gBACR,OAAO;oBACL,CAAC,CAAC,iCAAiC,IAAI,EAAE;oBACzC,CAAC,CAAC,4BAA4B,IAAI,EAAE;aACvC;YACD,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC3C,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/types.js

@@ -0,0 +1,22 @@
+/**
+ * Shared types for `anyray-connect`.
+ *
+ * The CLI resolves a single `GatewayTarget` (where the gateway lives + the
+ * placeholder key + content-free attribution) and hands it to each registered
+ * `ToolAdapter`. Adapters own one tool's config; they never make routing or
+ * provider decisions — that's the gateway's job. This mirrors the optimizer's
+ * strategy-registry seam: add a tool by adding an adapter, not by branching the
+ * orchestrator.
+ *
+ * PRIVACY: nothing here carries prompt/response content. `metadata` is identity
+ * grouping only (user/team/intent/session), matching the gateway's
+ * `x-anyray-metadata` contract.
+ */
+/** Build the `x-anyray-metadata` header value, or undefined when empty. */
+export const metadataHeaderValue = (metadata) => {
+    const entries = Object.entries(metadata).filter(([, v]) => v);
+    if (entries.length === 0)
+        return undefined;
+    return JSON.stringify(Object.fromEntries(entries));
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAoGH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,QAA6B,EACT,EAAE;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC"}

package/dist/util/identity.js

@@ -0,0 +1,25 @@
+import { execFileSync } from 'node:child_process';
+import os from 'node:os';
+const gitConfig = (field) => {
+    try {
+        const value = execFileSync('git', ['config', '--get', field], {
+            encoding: 'utf-8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        return value || undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+const osUsername = () => {
+    try {
+        return os.userInfo().username || undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+/** Best-effort display name: git user.name → user.email → OS username. Never throws. */
+export const detectDisplayName = () => gitConfig('user.name') ?? gitConfig('user.email') ?? osUsername() ?? 'unknown';
+//# sourceMappingURL=identity.js.map

package/dist/util/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/util/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,SAAS,GAAG,CAAC,KAAa,EAAsB,EAAE;IACtD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;YAC5D,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,IAAI,SAAS,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,GAAuB,EAAE;IAC1C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAW,EAAE,CAC5C,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,IAAI,UAAU,EAAE,IAAI,SAAS,CAAC"}