cartethyia 2.5.3 → 2.5.4

package/dist/dashboard/precompressed-assets.json

@@ -2,72 +2,72 @@
   "count": 114,
   "assets": [
     "assets\\AccountCooldown-Bjo92Qat.js",
-    "assets\\BannedPage-hfCzi-Ux.js",
-    "assets\\CliToolDetailPage-DLGqYEwI.js",
-    "assets\\CliToolsPage-DEDyKBlC.js",
-    "assets\\CombosPage-CfuYiQ8Z.js",
-    "assets\\ConsoleLogPage-bsLuZmYH.js",
-    "assets\\CustomizationPage-_UWhwziJ.js",
-    "assets\\HealthEventsModal-Cjfc5WFS.js",
-    "assets\\LoginPage-DDVIfZGW.js",
-    "assets\\ModelPicker-CWkTUtpX.js",
-    "assets\\OverviewPage-B53YYMng.js",
-    "assets\\ProviderDetailPage-B0KaAQf0.js",
+    "assets\\BannedPage-C2orBsI2.js",
+    "assets\\CliToolDetailPage-DUcZ6pMB.js",
+    "assets\\CliToolsPage-BV6pxVQo.js",
+    "assets\\CombosPage-Bsan4679.js",
+    "assets\\ConsoleLogPage-CW-wPmJ6.js",
+    "assets\\CustomizationPage-0p8uX7vB.js",
+    "assets\\HealthEventsModal-BjqSMfko.js",
+    "assets\\LoginPage-BvzCx8Kr.js",
+    "assets\\ModelPicker-BY1aKEkP.js",
+    "assets\\OverviewPage-DOQpy1y0.js",
+    "assets\\ProviderDetailPage-ecxyUMzt.js",
     "assets\\ProviderIcon-CmfzxpVM.js",
-    "assets\\ProvidersPage-Dx31DgIO.js",
-    "assets\\ProxyPage-BpnR4kXT.js",
-    "assets\\QuotaPage-BpOQCnun.js",
-    "assets\\SettingsPage-DV1eo2J_.js",
-    "assets\\SetupPage-D6pmQ86L.js",
-    "assets\\SortableList-DWvKiuSl.js",
-    "assets\\StudioPage-CmkUrgdj.js",
+    "assets\\ProvidersPage-Js9jUPSb.js",
+    "assets\\ProxyPage-J3TBi3Kx.js",
+    "assets\\QuotaPage-C1gZS6xr.js",
+    "assets\\SettingsPage-CS86ho5X.js",
+    "assets\\SetupPage-DDbMQsoo.js",
+    "assets\\SortableList-CB3Z7VTf.js",
+    "assets\\StudioPage-D95UCPHI.js",
     "assets\\ToolIcon-K1ckcDKg.js",
-    "assets\\UsagePage-B47uOydr.js",
-    "assets\\api-keys-uNywYlfv.js",
-    "assets\\app-CafWtVXA.js",
-    "assets\\app-DxivpfYG.css",
+    "assets\\UsagePage-Cnae9SWA.js",
+    "assets\\api-keys-VY68Mhd1.js",
+    "assets\\app-COlK95oi.css",
+    "assets\\app-DCQZRmHY.js",
     "assets\\arrow-left-CpBxkoxI.js",
     "assets\\arrow-right-Dl5yKnp8.js",
-    "assets\\assert-NHwYq95t.js",
+    "assets\\assert-Chi7pCnt.js",
     "assets\\backup-file-gdKIlg8U.js",
-    "assets\\badge-6uzDDvqs.js",
-    "assets\\banner-4_WNg2WZ.js",
+    "assets\\badge-D4pQapKj.js",
+    "assets\\banner-DH6cg-_B.js",
     "assets\\brain-Cwed_72z.js",
-    "assets\\card--AtFedAq.js",
+    "assets\\card-BKqlUOe4.js",
     "assets\\chevron-right-BXIy5l3h.js",
     "assets\\circle-alert-CntYHV5v.js",
     "assets\\circle-check-BU3v_mFW.js",
-    "assets\\cli-tools-B3e7dx3N.js",
-    "assets\\clipboard-button-NreUx6c8.js",
+    "assets\\cli-tools-fTgljTGA.js",
+    "assets\\clipboard-button-D5Ys_sM0.js",
     "assets\\cog-CdWhsajs.js",
-    "assets\\dialog-BtpsJU98.js",
+    "assets\\database-Dz9N3zGd.js",
+    "assets\\dialog-BYj-8WuK.js",
     "assets\\dialog-actions-B1axpEg7.js",
-    "assets\\download-A0SW9OCW.js",
     "assets\\download-dRFo5_Wu.js",
-    "assets\\drawer-WwwtzihF.js",
-    "assets\\entry-CkryrIea.js",
-    "assets\\entry-TJIye_jT.js",
-    "assets\\entry-jy9_4-Ke.js",
+    "assets\\drawer-CmXIZ6H1.js",
+    "assets\\entry-CBg5zeu8.js",
+    "assets\\entry-CQBr6U9c.js",
+    "assets\\entry-CgdSAzEV.js",
     "assets\\eye-C_hawfH4.js",
     "assets\\eye-off-Bk5g2luF.js",
     "assets\\fingerprint-pattern-BWuHtbW4.js",
     "assets\\gauge-BbIMy7MB.js",
-    "assets\\github-badge-D_eM3IgG.js",
+    "assets\\github-badge-BlptL8Uf.js",
     "assets\\image-BPaouViG.js",
-    "assets\\index-BydyKaDz.js",
-    "assets\\inline-BcNGF8Gr.js",
-    "assets\\input-BG41et9G.js",
+    "assets\\index-js6TJvdr.js",
+    "assets\\inline-DUWDSmDV.js",
+    "assets\\input-LVjgZq4f.js",
     "assets\\jsx-runtime-CXUMngI_.js",
     "assets\\key-round-UkavsGxp.js",
     "assets\\layers-2-glBbjl.js",
-    "assets\\layout-C8mer_Ak.js",
-    "assets\\list-row-Gh_W4OR_.js",
-    "assets\\live-BJGYRBnR.js",
+    "assets\\layout-CPfxpsfy.js",
+    "assets\\list-row-DupvLfDx.js",
+    "assets\\live-C4pEJUqI.js",
     "assets\\log-in-BmRjy60c.js",
     "assets\\message-circle-CCxGwRvv.js",
-    "assets\\model-bans-DeVLDA7I.js",
-    "assets\\mutation-BkoLM5Ba.js",
-    "assets\\numbers-Bs4LOOuf.js",
+    "assets\\model-bans-BRiuufkB.js",
+    "assets\\mutation-B4ROwk8L.js",
+    "assets\\numbers-YNcHvRY7.js",
     "assets\\pencil-768ysRAr.js",
     "assets\\plus-DIdX_g-x.js",
     "assets\\power-off-Yjw9GMJh.js",
@@ -89,31 +89,31 @@
     "assets\\providers\\parallel.svg",
     "assets\\providers\\tokenharbor.svg",
     "assets\\providers\\zai-coding-plan.svg",
-    "assets\\query-keys-D7wX2vM5.js",
+    "assets\\query-keys-gmjzC3RS.js",
     "assets\\quota-DZGyp0N5.js",
     "assets\\refresh-cw-BqJFk4sU.js",
     "assets\\rotate-ccw-CufcqITi.js",
     "assets\\route-CNSNj9Zm.js",
-    "assets\\routing-CcusqXA7.js",
+    "assets\\routing-C7tBT5o-.js",
     "assets\\scaling-nWE4Cx8f.js",
     "assets\\search-JOKus9rb.js",
-    "assets\\select-BO6h8yNv.js",
-    "assets\\settings-mpmXTgUa.js",
+    "assets\\select-WUCXorXw.js",
+    "assets\\settings-C_zKl1GS.js",
     "assets\\shield-check-DVS0Foqh.js",
-    "assets\\sparkles-BRaRUxAU.js",
-    "assets\\stack-DwLmjUFK.js",
-    "assets\\state-DYdQmdAl.js",
+    "assets\\stack-_3O0F8Xn.js",
+    "assets\\state-BgTxHcJS.js",
     "assets\\stream-retry-5QnVuSSo.js",
-    "assets\\switch-CidSfbG7.js",
-    "assets\\terminal-Bd4ee8TA.js",
+    "assets\\switch-DEjTtOWf.js",
+    "assets\\terminal-0_IjPWTk.js",
     "assets\\tokens-DDxMbSRL.js",
     "assets\\trash-Cppn5c3R.js",
     "assets\\use-clipboard-B0Sy03fE.js",
     "assets\\use-presence-BSZEBx7U.js",
     "assets\\use-reduced-motion-C4B0R6Sz.js",
     "assets\\use-timeout-BwcBBRrT.js",
-    "assets\\useMutation-w4u4CVue.js",
+    "assets\\useMutation-BWSC0UAS.js",
     "assets\\wrench-B6E1oEuY.js",
+    "assets\\zap-C4EeVW4q.js",
     "index.html"
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cartethyia",
-  "version": "2.5.3",
+  "version": "2.5.4",
   "description": "A powerful, self-hosted reverse proxy for OpenAI- and Anthropic-compatible AI clients, powered by native Bun and Elysia. It serves both protocols from a single server, routes every model across any configured provider, and translates requests and responses in real time — streaming and prompt caching included. Underneath it runs a full delivery engine: per-account health tracking, quota and cooldown enforcement, automatic failover across pools and providers, usage accounting, and telemetry. Point OpenCode, Cline, Claude Code, Codex, or any compatible client at Cartethyia and it keeps its native protocol while the gateway absorbs every provider-specific difference behind it. Runs on embedded SQLite or external PostgreSQL with optional Redis coordination, ships as a global CLI with a system-tray console, and needs only Bun 1.4+ alongside Node.js/npm.",
   "license": "GPL-3.0-only",
   "type": "module",

package/scripts/cli/autostart.ts

@@ -0,0 +1,237 @@
+// Registers the tray with the OS login/startup facility.
+//
+// The tray only runs while someone starts it, so a gateway that is meant to be
+// always-on needs the OS to start it. Each platform has its own place for that,
+// and they differ in what "disable" means:
+//
+// - **Windows** — a value under `HKCU\\Software\\Microsoft\\Windows\\
+//   CurrentVersion\\Run`. Task Manager's Startup tab lists it, so an operator
+//   can disable it there without touching the registry by hand.
+// - **macOS** — a launch agent plist in `~/Library/LaunchAgents`.
+// - **Linux** — a `.desktop` file in `~/.config/autostart` (the freedesktop
+//   spec, honoured by every mainstream desktop).
+//
+// This only ever writes the *user's* own startup location, never a system one,
+// so nothing here needs elevation and nothing here is forced on: removing the
+// entry is the documented way to turn it off, and the tray itself keeps working
+// when started by hand.
+
+import { existsSync, mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { join } from "node:path";
+
+/** The launch label, used as the registry value name, plist label and file name. */
+const APP_ID = "cartethyia-tray";
+
+export interface AutostartState {
+  readonly platform: string;
+  readonly enabled: boolean;
+  /** Where the entry lives, for the operator who wants to remove it by hand. */
+  readonly location: string;
+  /** Why it is not supported here, when it is not. */
+  readonly reason?: string;
+}
+
+/**
+ * The command the OS should run.
+ *
+ * Quoted once here rather than at each call site: the Windows registry value,
+ * the plist arguments and the desktop `Exec` line each parse spaces
+ * differently, and a path under `C:\\Users\\First Last\\...` silently becomes
+ * two arguments otherwise.
+ */
+function commandFor(executable: string, args: readonly string[]): string {
+  const quoted = /\s/.test(executable) ? `"${executable}"` : executable;
+  return [quoted, ...args.map((arg) => (/\s/.test(arg) ? `"${arg}"` : arg))].join(" ");
+}
+
+function windowsCommand(command: string): string[] {
+  return [
+    "reg",
+    "add",
+    "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
+    "/v",
+    APP_ID,
+    "/t",
+    "REG_SZ",
+    "/d",
+    command,
+    "/f",
+  ];
+}
+
+function launchAgentsPath(): string {
+  return join(homedir(), "Library", "LaunchAgents", `${APP_ID}.plist`);
+}
+
+/** Escapes the five entities XML defines, so a path cannot break the plist. */
+function xmlEscape(value: string): string {
+  return value
+    .replaceAll("&", "&")
+    .replaceAll("<", "&lt;")
+    .replaceAll(">", "&gt;")
+    .replaceAll('"', "&quot;")
+    .replaceAll("'", "&apos;");
+}
+
+function plistFor(executable: string, args: readonly string[]): string {
+  const programArgs = [executable, ...args]
+    .map((part) => `    <string>${xmlEscape(part)}</string>`)
+    .join("\n");
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${APP_ID}</string>
+  <key>ProgramArguments</key>
+  <array>
+${programArgs}
+  </array>
+  <key>RunAtLoad</key>
+  <true/>
+  <!-- Restart only if it exits on its own; a crash loop is not a reason to
+       respawn forever, and a stopped tray should stay stopped. -->
+  <key>KeepAlive</key>
+  <false/>
+</dict>
+</plist>
+`;
+}
+
+function desktopEntryFor(command: string): string {
+  return `[Desktop Entry]
+Type=Application
+Name=Cartethyia Tray
+Exec=${command}
+Hidden=false
+NoDisplay=false
+X-GNOME-Autostart-enabled=true
+`;
+}
+
+/**
+ * Enables autostart for the tray.
+ *
+ * Returns the resulting state rather than throwing, because a failure here must
+ * not abort startup: the tray is still perfectly usable when launched by hand,
+ * and an operator who cannot write to their own startup folder has a reason we
+ * should report, not crash on.
+ */
+export async function enableAutostart(
+  executable: string,
+  args: readonly string[],
+): Promise<AutostartState> {
+  const os = platform();
+  const command = commandFor(executable, args);
+
+  if (os === "win32") {
+    const proc = Bun.spawn(windowsCommand(command), { stdout: "pipe", stderr: "pipe" });
+    const code = await proc.exited;
+    return {
+      platform: os,
+      enabled: code === 0,
+      location: "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
+      ...(code === 0
+        ? {}
+        : { reason: "reg add failed; the entry can be added by hand or via Task Manager" }),
+    };
+  }
+
+  if (os === "darwin") {
+    const path = launchAgentsPath();
+    try {
+      mkdirSync(join(homedir(), "Library", "LaunchAgents"), { recursive: true });
+      writeFileSync(path, plistFor(executable, args), "utf8");
+      return { platform: os, enabled: true, location: path };
+    } catch (error) {
+      return {
+        platform: os,
+        enabled: false,
+        location: path,
+        reason: error instanceof Error ? error.message : "could not write the launch agent",
+      };
+    }
+  }
+
+  if (os === "linux") {
+    const dir = join(homedir(), ".config", "autostart");
+    const path = join(dir, `${APP_ID}.desktop`);
+    try {
+      mkdirSync(dir, { recursive: true });
+      writeFileSync(path, desktopEntryFor(command), "utf8");
+      return { platform: os, enabled: true, location: path };
+    } catch (error) {
+      return {
+        platform: os,
+        enabled: false,
+        location: path,
+        reason: error instanceof Error ? error.message : "could not write the desktop entry",
+      };
+    }
+  }
+
+  return {
+    platform: os,
+    enabled: false,
+    location: "",
+    reason: `no supported autostart location on ${os}`,
+  };
+}
+
+/** Removes the entry, so the tray stops starting with the session. */
+export async function disableAutostart(): Promise<AutostartState> {
+  const os = platform();
+
+  if (os === "win32") {
+    const proc = Bun.spawn(
+      [
+        "reg",
+        "delete",
+        "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
+        "/v",
+        APP_ID,
+        "/f",
+      ],
+      { stdout: "pipe", stderr: "pipe" },
+    );
+    // `reg delete` exits non-zero when the value was already absent, which is
+    // the state the caller wanted anyway, so the code is not read.
+    await proc.exited;
+    return {
+      platform: os,
+      enabled: false,
+      location: "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
+    };
+  }
+
+  const path = os === "darwin" ? launchAgentsPath() : join(homedir(), ".config", "autostart", `${APP_ID}.desktop`);
+  try {
+    if (existsSync(path)) rmSync(path);
+    return { platform: os, enabled: false, location: path };
+  } catch (error) {
+    return {
+      platform: os,
+      enabled: false,
+      location: path,
+      reason: error instanceof Error ? error.message : "could not remove the entry",
+    };
+  }
+}
+
+/** Whether an entry is currently registered. */
+export function autostartStatus(): AutostartState {
+  const os = platform();
+  if (os === "win32") {
+    // Reading the registry needs a process, so this is reported as unknown
+    // rather than guessed; `disableAutostart` is idempotent either way.
+    return {
+      platform: os,
+      enabled: false,
+      location: "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
+      reason: "status is not readable synchronously; enable or disable to set it",
+    };
+  }
+  const path = os === "darwin" ? launchAgentsPath() : join(homedir(), ".config", "autostart", `${APP_ID}.desktop`);
+  return { platform: os, enabled: existsSync(path), location: path };
+}

package/scripts/cli/command/console-menu.ts

@@ -14,7 +14,7 @@ import { launchBackgroundWithStatus, openUrl } from "../ui/background";
 import { chooseFromMenu, confirmByTyping, confirmStep } from "../ui/prompt";
 import { renderWordmark } from "../ui/wordmark";
 import { exportBackup, resetConsoleAccount } from "./admin";
-import { updateCommand } from "./update";
+import { runDetachedUpdate } from "./update";
 
 /**
  * The default `carte` experience: start the gateway, then offer an arrow-key
@@ -176,17 +176,13 @@ export async function startMenu(): Promise<void> {
         // from that directory, so an in-process install can never succeed.
         // Print the command and exit, the way 9router does.
         await shutDown();
+        runDetachedUpdate();
         console.log("");
         console.log(`Update available: ${currentVersion} \u2192 ${latestVersion}`);
+        console.log("Detached update started; this process will exit now.");
+        console.log("Re-run `carte` after it finishes.");
         console.log("");
-        console.log("Run this now that Cartethyia has stopped:");
-        console.log("");
-        console.log(`   ${updateCommand()}`);
-        console.log("");
-        console.log("This terminal will stay open for 180s so you can copy the command, then exit.");
         running = false;
-        await new Promise<void>((resolve) => setTimeout(resolve, 180_000));
-        console.log("Session ended. Run the command above to update.");
         process.exit(0);
       },
       async () => {

package/scripts/cli/command/update.ts

@@ -1,23 +1,40 @@
 /**
- * The update path, which prints a command rather than running one.
+ * The update path.
  *
  * npm cannot replace this package's directory while a process is executing out
- * of it: on Windows the rename fails with EBUSY and npm exits 14. Stopping the
- * gateway is not enough either, because the CLI or tray itself is the process
- * holding the directory. So every caller stops, prints the command, and exits —
- * the same shape 9router uses.
+ * of it (EBUSY on Windows). So we spawn the installer as a detached process,
+ * print a short notice, and exit — the installer runs after this process is gone.
+ * After install, it attempts to restart the gateway (systemd if available, else
+ * `cartethyia start`), so the new version comes up automatically.
+ * Cross-OS: uses npm.cmd on Windows.
  */
+import { spawn } from "node:child_process";
+
 export function updateCommand(): string {
   return "npm install -g cartethyia@latest --prefer-online";
 }
 
-/** Prints the "run this now" block after Cartethyia has stopped. */
+export function runDetachedUpdate(): void {
+  const isWin = process.platform === "win32";
+  const shell = isWin ? "cmd.exe" : "/bin/sh";
+  const install = "npm install -g cartethyia@latest --prefer-online";
+  const restart = isWin
+    ? "cartethyia start"
+    : "systemctl restart cartethyia 2>/dev/null || cartethyia start";
+  const script = `${install} && ${restart}`;
+  const args = isWin ? ["/c", script] : ["-c", script];
+  const child = spawn(shell, args, {
+    detached: true,
+    stdio: "ignore",
+  });
+  child.unref();
+}
+
 export function printUpdateInstructions(from: string, to: string | null): void {
   console.log("");
   console.log(`Update available: ${from} \u2192 ${to ?? "latest"}`);
   console.log("");
-  console.log("Run this now that Cartethyia has stopped:");
+  console.log("Starting detached update; this process will exit now.");
+  console.log("The gateway will restart automatically after the install.");
   console.log("");
-  console.log(`   ${updateCommand()}`);
-  console.log("");
-}
+}

package/scripts/cli/main.ts

@@ -2,7 +2,7 @@ import { mkdirSync } from "node:fs";
 import { resolveUserConfigDir } from "../../src/config/package-paths";
 import { ENV_PATH, readEnvFile } from "./support/env";
 import { MINIMUM_BUN_VERSION, assertBunVersion } from "./support/bun";
-import { printUpdateInstructions } from "./command/update";
+import { printUpdateInstructions, runDetachedUpdate } from "./command/update";
 import { reportTrayStartup } from "./support/startup-signal";
 
 process.env.CARTETHYIA_CONFIG_DIR ??= resolveUserConfigDir();
@@ -67,12 +67,39 @@ async function main(): Promise<void> {
       await startTray();
       return;
     }
+    case "autostart": {
+      const { enableAutostart, disableAutostart, autostartStatus } = await import("./autostart");
+      const arg = Bun.argv[3]?.trim();
+      if (arg === "off" || arg === "disable") {
+        const state = await disableAutostart();
+        console.log(`Autostart disabled (${state.location || state.platform}).`);
+        return;
+      }
+      if (arg === "status") {
+        const state = autostartStatus();
+        console.log(
+          `Autostart: ${state.enabled ? "enabled" : "not enabled"} — ${state.location || state.platform}` +
+            (state.reason ? ` (${state.reason})` : ""),
+        );
+        return;
+      }
+      // The tray is what autostart launches: a gateway alone has no session to
+      // attach to and no icon to show.
+      const state = await enableAutostart(process.execPath, [Bun.argv[1] ?? "carte", "tray"]);
+      console.log(
+        state.enabled
+          ? `Autostart enabled — ${state.location}`
+          : `Autostart not enabled: ${state.reason ?? "unknown reason"}`,
+      );
+      return;
+    }
     case "doctor": {
       const { doctor } = await import("./command/doctor");
       await doctor();
       return;
     }
     case "update":
+      runDetachedUpdate();
       printUpdateInstructions("this install", null);
       return;
     case "--help":