context-lens 0.6.1 → 0.6.2

package/dist/config.js

@@ -0,0 +1,113 @@
+/**
+ * Context Lens user configuration.
+ *
+ * Loaded from ~/.context-lens/config.toml on startup.
+ * All settings can be overridden with CLI flags.
+ *
+ * Precedence: defaults → config file → CLI flags
+ */
+import fs from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { parse } from "smol-toml";
+const DEFAULTS = {
+    proxy: {
+        port: 4040,
+        redact: undefined,
+        rehydrate: false,
+    },
+    ui: {
+        port: 4041,
+        noOpen: false,
+    },
+    privacy: {
+        level: undefined,
+    },
+};
+export function getConfigPath() {
+    return join(homedir(), ".context-lens", "config.toml");
+}
+/**
+ * Load and parse the user config file.
+ *
+ * Returns merged defaults + file values. Missing keys fall back to defaults.
+ * Parse errors are logged and defaults are returned.
+ */
+export function loadConfig() {
+    const configPath = getConfigPath();
+    if (!fs.existsSync(configPath)) {
+        return structuredClone(DEFAULTS);
+    }
+    let raw;
+    try {
+        const text = fs.readFileSync(configPath, "utf8");
+        raw = parse(text);
+    }
+    catch (err) {
+        console.warn(`Warning: Could not parse config file ${configPath}:`, err instanceof Error ? err.message : String(err));
+        return structuredClone(DEFAULTS);
+    }
+    return mergeConfig(raw);
+}
+const VALID_REDACT = new Set(["secrets", "pii", "strict"]);
+const VALID_PRIVACY = new Set(["minimal", "standard", "full"]);
+function section(value) {
+    return typeof value === "object" && value !== null
+        ? value
+        : null;
+}
+function mergeConfig(raw) {
+    const cfg = structuredClone(DEFAULTS);
+    if (typeof raw !== "object" || raw === null)
+        return cfg;
+    const r = raw;
+    const proxy = section(r.proxy);
+    if (proxy) {
+        if (typeof proxy.port === "number")
+            cfg.proxy.port = proxy.port;
+        if (typeof proxy.redact === "string" && VALID_REDACT.has(proxy.redact)) {
+            cfg.proxy.redact = proxy.redact;
+        }
+        if (typeof proxy.rehydrate === "boolean") {
+            cfg.proxy.rehydrate = proxy.rehydrate;
+        }
+    }
+    const ui = section(r.ui);
+    if (ui) {
+        if (typeof ui.port === "number")
+            cfg.ui.port = ui.port;
+        if (typeof ui.no_open === "boolean")
+            cfg.ui.noOpen = ui.no_open;
+    }
+    const privacy = section(r.privacy);
+    if (privacy) {
+        if (typeof privacy.level === "string" && VALID_PRIVACY.has(privacy.level)) {
+            cfg.privacy.level =
+                privacy.level;
+        }
+    }
+    return cfg;
+}
+/**
+ * Generate a commented example config file.
+ */
+export function exampleConfig() {
+    return [
+        "# Context Lens configuration",
+        "# Location: ~/.context-lens/config.toml",
+        "# All settings can be overridden with CLI flags.",
+        "",
+        "[proxy]",
+        "# port = 4040",
+        '# redact = "secrets"   # secrets | pii | strict',
+        "# rehydrate = false",
+        "",
+        "[ui]",
+        "# port = 4041",
+        "# no_open = false",
+        "",
+        "[privacy]",
+        '# level = "standard"   # minimal | standard | full',
+    ].join("\n");
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAiBlC,MAAM,QAAQ,GAAsB;IAClC,KAAK,EAAE;QACL,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,KAAK;KACjB;IACD,EAAE,EAAE;QACF,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,KAAK;KACd;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;KACjB;CACF,CAAC;AAEF,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IAEnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACjD,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,wCAAwC,UAAU,GAAG,EACrD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACF,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC3D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAU/D,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAoB;QACvB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACxD,MAAM,CAAC,GAAG,GAA2D,CAAC;IAEtE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAChE,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAA8C,CAAC;QAC1E,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACzC,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ;YAAE,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;QACvD,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;IAClE,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,OAAO,CAAC,KAAK;gBACf,OAAO,CAAC,KAA8C,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,8BAA8B;QAC9B,yCAAyC;QACzC,kDAAkD;QAClD,EAAE;QACF,SAAS;QACT,eAAe;QACf,iDAAiD;QACjD,qBAAqB;QACrB,EAAE;QACF,MAAM;QACN,eAAe;QACf,mBAAmB;QACnB,EAAE;QACF,WAAW;QACX,oDAAoD;KACrD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/core/models.d.ts

@@ -1,42 +1,10 @@
 /**
- * Known model context limits (tokens).
+ * Model metadata re-exported from @contextio/core.
  *
- * Keys are ordered most-specific-first because `getContextLimit()` does substring matching.
+ * Context-lens inherits pricing, context limits, and cost estimation
+ * from the shared contextio package. This file is the single import
+ * point so the rest of the codebase doesn't import from @contextio/core
+ * directly.
  */
-export declare const CONTEXT_LIMITS: Record<string, number>;
-/**
- * Resolve an approximate context window size for a given model string.
- *
- * @param model - Model identifier (often includes version suffixes).
- * @returns Context limit in tokens.
- */
-export declare function getContextLimit(model: string): number;
-/**
- * Model pricing: `[inputPerMTok, outputPerMTok]` in USD.
- *
- * Keys ordered most-specific-first to avoid substring false matches
- * (e.g. `gpt-4o-mini` before `gpt-4o`, `o3-mini` before `o3`).
- *
- * Prices sourced from OpenRouter (openrouter.ai/api/v1/models) and reflect
- * standard per-token rates as of early 2026. Keys are matched as substrings
- * of the incoming model string, so they work for both direct-API model IDs
- * (e.g. `gemini-2.5-pro`) and OpenRouter-prefixed IDs
- * (e.g. `google/gemini-2.5-pro`).
- */
-export declare const MODEL_PRICING: Record<string, [number, number]>;
-/**
- * Estimate cost in USD for a request/response token pair using `MODEL_PRICING`.
- *
- * Cache pricing varies by provider:
- * - Anthropic: cache reads at 10% of base input, writes at 25%
- * - Gemini: cached content at 25% of base input, no write cost
- *
- * @param model - Model identifier (substring matched against known keys).
- * @param inputTokens - Input/prompt tokens (non-cached).
- * @param outputTokens - Output/completion tokens.
- * @param cacheReadTokens - Cache read tokens.
- * @param cacheWriteTokens - Cache write tokens.
- * @returns Cost in USD, rounded to 6 decimals; `null` if the model is unknown.
- */
-export declare function estimateCost(model: string, inputTokens: number, outputTokens: number, cacheReadTokens?: number, cacheWriteTokens?: number): number | null;
+export { CONTEXT_LIMITS, estimateCost, getContextLimit, getKnownModels, MODEL_PRICING, } from "@contextio/core";
 //# sourceMappingURL=models.d.ts.map

package/dist/core/models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/core/models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAgEjD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAiE1D,CAAC;AA4BF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,GACnB,MAAM,GAAG,IAAI,CAoBf"}
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/core/models.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,cAAc,EACd,YAAY,EACZ,eAAe,EACf,cAAc,EACd,aAAa,GACd,MAAM,iBAAiB,CAAC"}

package/dist/core/models.js

@@ -1,217 +1,10 @@
 /**
- * Known model context limits (tokens).
+ * Model metadata re-exported from @contextio/core.
  *
- * Keys are ordered most-specific-first because `getContextLimit()` does substring matching.
+ * Context-lens inherits pricing, context limits, and cost estimation
+ * from the shared contextio package. This file is the single import
+ * point so the rest of the codebase doesn't import from @contextio/core
+ * directly.
  */
-export const CONTEXT_LIMITS = {
-    // Anthropic
-    "claude-opus-4.6": 1000000,
-    "claude-opus-4.5": 200000,
-    "claude-opus-4.1": 200000,
-    "claude-opus-4": 200000,
-    "claude-sonnet-4.6": 1000000,
-    "claude-sonnet-4.5": 1000000,
-    "claude-sonnet-4": 1000000,
-    "claude-haiku-4.5": 200000,
-    "claude-haiku-4": 200000,
-    "claude-3-7-sonnet": 200000,
-    "claude-3-5-sonnet": 200000,
-    "claude-3-5-haiku": 200000,
-    "claude-3-haiku": 200000,
-    "claude-3-opus": 200000,
-    // OpenAI — specific variants before generic slugs
-    "gpt-5.2-pro": 400000,
-    "gpt-5.2-codex": 400000,
-    "gpt-5.2-chat": 128000,
-    "gpt-5.2": 400000,
-    "gpt-5.1-codex-max": 400000,
-    "gpt-5.1-codex-mini": 400000,
-    "gpt-5.1-codex": 400000,
-    "gpt-5.1-chat": 128000,
-    "gpt-5.1": 400000,
-    "gpt-5.3-codex": 400000,
-    "gpt-5-pro": 400000,
-    "gpt-5-codex": 400000,
-    "gpt-5-chat": 128000,
-    "gpt-5-mini": 400000,
-    "gpt-5-nano": 400000,
-    "gpt-5": 400000,
-    "gpt-4.1-mini": 1047576,
-    "gpt-4.1-nano": 1047576,
-    "gpt-4.1": 1047576,
-    "gpt-4o-mini": 128000,
-    "gpt-4o": 128000,
-    "gpt-4-turbo": 128000,
-    "gpt-4": 8192,
-    "gpt-3.5-turbo": 16385,
-    "o4-mini-deep-research": 200000,
-    "o4-mini-high": 200000,
-    "o4-mini": 200000,
-    "o3-deep-research": 200000,
-    "o3-pro": 200000,
-    "o3-mini-high": 200000,
-    "o3-mini": 200000,
-    o3: 200000,
-    "o1-pro": 200000,
-    "o1-mini": 128000,
-    o1: 200000,
-    // Google Gemini — specific before generic
-    "gemini-3.1-pro-preview": 1048576,
-    "gemini-3-pro-preview": 1048576,
-    "gemini-3-flash-preview": 1048576,
-    "gemini-2.5-pro-preview": 1048576,
-    "gemini-2.5-pro": 1048576,
-    "gemini-2.5-flash-lite": 1048576,
-    "gemini-2.5-flash": 1048576,
-    "gemini-2.0-flash-lite": 1048576,
-    "gemini-2.0-flash": 1048576,
-    "gemini-1.5-pro": 2097152,
-    "gemini-1.5-flash": 1048576,
-};
-/**
- * Resolve an approximate context window size for a given model string.
- *
- * @param model - Model identifier (often includes version suffixes).
- * @returns Context limit in tokens.
- */
-export function getContextLimit(model) {
-    for (const [key, limit] of Object.entries(CONTEXT_LIMITS)) {
-        if (model.includes(key))
-            return limit;
-    }
-    return 128000; // default fallback
-}
-/**
- * Model pricing: `[inputPerMTok, outputPerMTok]` in USD.
- *
- * Keys ordered most-specific-first to avoid substring false matches
- * (e.g. `gpt-4o-mini` before `gpt-4o`, `o3-mini` before `o3`).
- *
- * Prices sourced from OpenRouter (openrouter.ai/api/v1/models) and reflect
- * standard per-token rates as of early 2026. Keys are matched as substrings
- * of the incoming model string, so they work for both direct-API model IDs
- * (e.g. `gemini-2.5-pro`) and OpenRouter-prefixed IDs
- * (e.g. `google/gemini-2.5-pro`).
- */
-export const MODEL_PRICING = {
-    // Anthropic — specific point-releases before generic slugs
-    "claude-opus-4.6": [5, 25],
-    "claude-opus-4.5": [5, 25],
-    "claude-opus-4.1": [15, 75],
-    "claude-opus-4": [15, 75],
-    "claude-sonnet-4.6": [3, 15],
-    "claude-sonnet-4.5": [3, 15],
-    "claude-sonnet-4": [3, 15],
-    "claude-haiku-4.5": [1, 5],
-    "claude-haiku-4": [0.8, 4],
-    "claude-3-7-sonnet": [3, 15],
-    "claude-3-5-sonnet": [3, 15],
-    "claude-3-5-haiku": [0.8, 4],
-    "claude-3-haiku": [0.25, 1.25],
-    "claude-3-opus": [15, 75],
-    // OpenAI — specific variants before generic slugs
-    "gpt-5.2-pro": [21, 168],
-    "gpt-5.2-codex": [1.75, 14],
-    "gpt-5.2-chat": [1.75, 14],
-    "gpt-5.2": [1.75, 14],
-    "gpt-5.1-codex-max": [1.25, 10],
-    "gpt-5.1-codex-mini": [0.25, 2],
-    "gpt-5.1-codex": [1.25, 10],
-    "gpt-5.1-chat": [1.25, 10],
-    "gpt-5.1": [1.25, 10],
-    // Codex subscription estimates
-    "gpt-5.3-codex": [1.75, 14],
-    "gpt-5-pro": [15, 120],
-    "gpt-5-codex": [1.25, 10],
-    "gpt-5-chat": [1.25, 10],
-    "gpt-5-mini": [0.25, 2],
-    "gpt-5-nano": [0.05, 0.4],
-    "gpt-5": [1.25, 10],
-    "gpt-4.1-mini": [0.4, 1.6],
-    "gpt-4.1-nano": [0.1, 0.4],
-    "gpt-4.1": [2.0, 8.0],
-    "gpt-4o-mini": [0.15, 0.6],
-    "gpt-4o": [2.5, 10],
-    "gpt-4-turbo": [10, 30],
-    "gpt-4": [30, 60],
-    "gpt-3.5-turbo": [0.5, 1.5],
-    "o4-mini-deep-research": [2, 8],
-    "o4-mini-high": [1.1, 4.4],
-    "o4-mini": [1.1, 4.4],
-    "o3-deep-research": [10, 40],
-    "o3-pro": [20, 80],
-    "o3-mini-high": [1.1, 4.4],
-    "o3-mini": [1.1, 4.4],
-    o3: [2, 8],
-    "o1-pro": [150, 600],
-    "o1-mini": [3, 12],
-    o1: [15, 60],
-    // Google Gemini — specific before generic
-    "gemini-3.1-pro-preview": [2, 12],
-    "gemini-3-pro-preview": [2, 12],
-    "gemini-3-flash-preview": [0.5, 3],
-    "gemini-2.5-pro-preview": [1.25, 10],
-    "gemini-2.5-pro": [1.25, 10],
-    "gemini-2.5-flash-lite": [0.1, 0.4],
-    "gemini-2.5-flash": [0.3, 2.5],
-    "gemini-2.0-flash-lite": [0.075, 0.3],
-    "gemini-2.0-flash": [0.1, 0.4],
-    "gemini-1.5-pro": [1.25, 5],
-    "gemini-1.5-flash": [0.075, 0.3],
-};
-/**
- * Cache pricing multipliers by provider prefix.
- *
- * Each entry maps a model key prefix to `[readMultiplier, writeMultiplier]`
- * relative to the base input price. For example, Anthropic charges 10% of
- * the base input rate for cache reads and 25% for cache writes.
- *
- * Gemini charges 25% of base input for cached content (reads). Gemini has
- * no separate "cache write" billing; context caching cost is handled
- * outside the per-request pricing.
- */
-const CACHE_PRICING = {
-    "claude-": [0.1, 0.25],
-    "gemini-": [0.25, 0],
-};
-/**
- * Look up cache pricing multipliers for a model key.
- */
-function getCacheMultipliers(modelKey) {
-    for (const [prefix, multipliers] of Object.entries(CACHE_PRICING)) {
-        if (modelKey.startsWith(prefix))
-            return multipliers;
-    }
-    return [0, 0];
-}
-/**
- * Estimate cost in USD for a request/response token pair using `MODEL_PRICING`.
- *
- * Cache pricing varies by provider:
- * - Anthropic: cache reads at 10% of base input, writes at 25%
- * - Gemini: cached content at 25% of base input, no write cost
- *
- * @param model - Model identifier (substring matched against known keys).
- * @param inputTokens - Input/prompt tokens (non-cached).
- * @param outputTokens - Output/completion tokens.
- * @param cacheReadTokens - Cache read tokens.
- * @param cacheWriteTokens - Cache write tokens.
- * @returns Cost in USD, rounded to 6 decimals; `null` if the model is unknown.
- */
-export function estimateCost(model, inputTokens, outputTokens, cacheReadTokens = 0, cacheWriteTokens = 0) {
-    for (const [key, [inp, out]] of Object.entries(MODEL_PRICING)) {
-        if (model.includes(key)) {
-            const [readMul, writeMul] = getCacheMultipliers(key);
-            const cacheReadCost = cacheReadTokens * inp * readMul;
-            const cacheWriteCost = cacheWriteTokens * inp * writeMul;
-            return (Math.round(((inputTokens * inp +
-                outputTokens * out +
-                cacheReadCost +
-                cacheWriteCost) /
-                1_000_000) *
-                1_000_000) / 1_000_000);
-        }
-    }
-    return null;
-}
+export { CONTEXT_LIMITS, estimateCost, getContextLimit, getKnownModels, MODEL_PRICING, } from "@contextio/core";
 //# sourceMappingURL=models.js.map

package/dist/core/models.js.map

@@ -1 +1 @@
-{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/core/models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAA2B;IACpD,YAAY;IACZ,iBAAiB,EAAE,OAAO;IAC1B,iBAAiB,EAAE,MAAM;IACzB,iBAAiB,EAAE,MAAM;IACzB,eAAe,EAAE,MAAM;IACvB,mBAAmB,EAAE,OAAO;IAC5B,mBAAmB,EAAE,OAAO;IAC5B,iBAAiB,EAAE,OAAO;IAC1B,kBAAkB,EAAE,MAAM;IAC1B,gBAAgB,EAAE,MAAM;IACxB,mBAAmB,EAAE,MAAM;IAC3B,mBAAmB,EAAE,MAAM;IAC3B,kBAAkB,EAAE,MAAM;IAC1B,gBAAgB,EAAE,MAAM;IACxB,eAAe,EAAE,MAAM;IACvB,kDAAkD;IAClD,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE,MAAM;IACvB,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,MAAM;IACjB,mBAAmB,EAAE,MAAM;IAC3B,oBAAoB,EAAE,MAAM;IAC5B,eAAe,EAAE,MAAM;IACvB,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,MAAM;IACjB,eAAe,EAAE,MAAM;IACvB,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,MAAM;IACpB,OAAO,EAAE,MAAM;IACf,cAAc,EAAE,OAAO;IACvB,cAAc,EAAE,OAAO;IACvB,SAAS,EAAE,OAAO;IAClB,aAAa,EAAE,MAAM;IACrB,QAAQ,EAAE,MAAM;IAChB,aAAa,EAAE,MAAM;IACrB,OAAO,EAAE,IAAI;IACb,eAAe,EAAE,KAAK;IACtB,uBAAuB,EAAE,MAAM;IAC/B,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,MAAM;IACjB,kBAAkB,EAAE,MAAM;IAC1B,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,MAAM;IACjB,EAAE,EAAE,MAAM;IACV,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,MAAM;IACjB,EAAE,EAAE,MAAM;IACV,0CAA0C;IAC1C,wBAAwB,EAAE,OAAO;IACjC,sBAAsB,EAAE,OAAO;IAC/B,wBAAwB,EAAE,OAAO;IACjC,wBAAwB,EAAE,OAAO;IACjC,gBAAgB,EAAE,OAAO;IACzB,uBAAuB,EAAE,OAAO;IAChC,kBAAkB,EAAE,OAAO;IAC3B,uBAAuB,EAAE,OAAO;IAChC,kBAAkB,EAAE,OAAO;IAC3B,gBAAgB,EAAE,OAAO;IACzB,kBAAkB,EAAE,OAAO;CAC5B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,mBAAmB;AACpC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqC;IAC7D,2DAA2D;IAC3D,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1B,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1B,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IAC3B,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IACzB,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5B,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5B,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1B,kBAAkB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1B,gBAAgB,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1B,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5B,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5B,kBAAkB,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5B,gBAAgB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;IAC9B,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IACzB,kDAAkD;IAClD,aAAa,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC;IACxB,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3B,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1B,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACrB,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC/B,oBAAoB,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3B,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1B,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACrB,+BAA+B;IAC/B,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3B,WAAW,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC;IACtB,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACzB,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACxB,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACvB,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;IACzB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACnB,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC1B,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC1B,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;IAC1B,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;IACnB,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IACvB,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IACjB,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC3B,uBAAuB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/B,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC1B,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IACrB,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IAC5B,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IAClB,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC1B,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IACrB,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IACpB,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAClB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IACZ,0CAA0C;IAC1C,wBAAwB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IACjC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC/B,wBAAwB,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAClC,wBAAwB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACpC,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5B,uBAAuB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IACnC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC9B,uBAAuB,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;IACrC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAC9B,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3B,kBAAkB,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC;CACjC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,aAAa,GAAqC;IACtD,SAAS,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC;IACtB,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,KAAK,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,WAAW,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAa,EACb,WAAmB,EACnB,YAAoB,EACpB,eAAe,GAAG,CAAC,EACnB,gBAAgB,GAAG,CAAC;IAEpB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,eAAe,GAAG,GAAG,GAAG,OAAO,CAAC;YACtD,MAAM,cAAc,GAAG,gBAAgB,GAAG,GAAG,GAAG,QAAQ,CAAC;YAEzD,OAAO,CACL,IAAI,CAAC,KAAK,CACR,CAAC,CAAC,WAAW,GAAG,GAAG;gBACjB,YAAY,GAAG,GAAG;gBAClB,aAAa;gBACb,cAAc,CAAC;gBACf,SAAS,CAAC;gBACV,SAAS,CACZ,GAAG,SAAS,CACd,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/core/models.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,cAAc,EACd,YAAY,EACZ,eAAe,EACf,cAAc,EACd,aAAa,GACd,MAAM,iBAAiB,CAAC"}

package/dist/core/routing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/core/routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,mBAAmB,EACnB,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,SAAS,EACV,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,aAY5B,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C,QAAQ,CAEV;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CA0C9C;AAeD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CA+BnE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC3C,SAAS,EAAE,SAAS,GACnB,mBAAmB,CAmCrB"}
+{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/core/routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,mBAAmB,EACnB,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,SAAS,EACV,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,aAY5B,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C,QAAQ,CAEV;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CA0C9C;AAeD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CA+BnE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC3C,SAAS,EAAE,SAAS,GACnB,mBAAmB,CA0CrB"}

package/dist/core/routing.js

@@ -157,7 +157,13 @@ export function resolveTargetUrl(parsedUrl, headers, upstreams) {
             }
         }
         else {
-            targetUrl = upstreams.openai + parsedUrl.pathname + search;
+            // Codex Enterprise sets OPENAI_BASE_URL without a /v1 suffix and
+            // appends paths like /responses directly. Normalize /responses to
+            // /v1/responses so it reaches the correct endpoint on api.openai.com.
+            const openaiPath = parsedUrl.pathname === "/responses"
+                ? "/v1/responses"
+                : parsedUrl.pathname;
+            targetUrl = upstreams.openai + openaiPath + search;
         }
     }
     else if (!targetUrl.startsWith("http")) {

package/dist/core/routing.js.map

@@ -1 +1 @@
-{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/core/routing.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,IAAI;IACJ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,YAAY;IACZ,WAAW;IACX,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,KAAK;CACN,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,OAA2C;IAE3C,OAAO,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,OAA2C;IAE3C,+CAA+C;IAC/C,IAAI,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC;QAC1C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAE/D,yBAAyB;IACzB,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC;IACpE,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACzD,IAAI,OAAO,CAAC,mBAAmB,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAEzD,kFAAkF;IAClF,4GAA4G;IAC5G,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CACjC,4EAA4E,CAC7E,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;IAED,qEAAqE;IACrE,MAAM,YAAY,GAChB,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC3C,QAAQ,CAAC,KAAK,CAAC,4BAA4B,CAAC;QAC5C,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACpC,IAAI,YAAY,IAAI,OAAO,CAAC,gBAAgB,CAAC;QAC3C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAErD,SAAS;IACT,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACxD,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAC/D,IAAI,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC;QACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACtD,IAAI,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAEtD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,+FAA+F;QAC/F,mFAAmF;QACnF,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,IACE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtB,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC1B,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG;aAClC,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAoB,EACpB,OAA2C,EAC3C,SAAoB;IAEpB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;IACtC,IAAI,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,SAAS,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC9D,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,SAAS,GAAG,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;QAChE,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YAChE,SAAS;gBACP,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;oBAC9D,SAAS,CAAC,QAAQ;oBAClB,MAAM,CAAC;QACX,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,oEAAoE;YACpE,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACtC,SAAS;oBACP,WAAW,QAAQ,4BAA4B;wBAC/C,SAAS,CAAC,QAAQ;wBAClB,MAAM,CAAC;YACX,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;YAC7D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC7D,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/core/routing.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,IAAI;IACJ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,YAAY;IACZ,WAAW;IACX,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,KAAK;CACN,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,OAA2C;IAE3C,OAAO,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,OAA2C;IAE3C,+CAA+C;IAC/C,IAAI,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC;QAC1C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAE/D,yBAAyB;IACzB,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC;IACpE,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACzD,IAAI,OAAO,CAAC,mBAAmB,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAEzD,kFAAkF;IAClF,4GAA4G;IAC5G,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CACjC,4EAA4E,CAC7E,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;IAED,qEAAqE;IACrE,MAAM,YAAY,GAChB,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC3C,QAAQ,CAAC,KAAK,CAAC,4BAA4B,CAAC;QAC5C,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACpC,IAAI,YAAY,IAAI,OAAO,CAAC,gBAAgB,CAAC;QAC3C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAErD,SAAS;IACT,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACxD,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAC/D,IAAI,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC;QACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACtD,IAAI,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,YAAY,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAEtD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,+FAA+F;QAC/F,mFAAmF;QACnF,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,IACE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtB,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC1B,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG;aAClC,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAoB,EACpB,OAA2C,EAC3C,SAAoB;IAEpB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;IACtC,IAAI,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,SAAS,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC9D,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,SAAS,GAAG,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;QAChE,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YAChE,SAAS;gBACP,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;oBAC9D,SAAS,CAAC,QAAQ;oBAClB,MAAM,CAAC;QACX,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,oEAAoE;YACpE,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACtC,SAAS;oBACP,WAAW,QAAQ,4BAA4B;wBAC/C,SAAS,CAAC,QAAQ;wBAClB,MAAM,CAAC;YACX,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;YAC7D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,iEAAiE;YACjE,kEAAkE;YAClE,sEAAsE;YACtE,MAAM,UAAU,GACd,SAAS,CAAC,QAAQ,KAAK,YAAY;gBACjC,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;YACzB,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;QACrD,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC"}

package/dist/http/headers.d.ts

@@ -1,25 +1,17 @@
 /**
- * Shared header redaction utilities.
+ * Header redaction utilities for captures and LHAR export.
  *
- * Context Lens captures and exports some headers for debugging and provenance,
- * but must never persist secrets (API keys, cookies, auth challenges, etc.).
- *
- * Keep this as the single source of truth to avoid drift between "capture" and "export".
+ * `selectHeaders` and `SENSITIVE_HEADERS` are re-exported from @contextio/core
+ * (single source of truth). `redactHeaders` is context-lens-specific: it
+ * strips sensitive headers from an already-string-valued map (used in LHAR
+ * export where multi-value arrays are not possible).
  */
-/** Case-insensitive set of header names that must never be persisted/exported. */
-export declare const SENSITIVE_HEADERS: Set<string>;
+export { SENSITIVE_HEADERS, selectHeaders } from "@contextio/core";
 /**
- * Remove sensitive headers from a header map.
+ * Remove sensitive headers from a string-valued header map.
  *
- * @param headers - Header map (string -> string)
- * @returns A new object with sensitive headers removed.
+ * Unlike `selectHeaders`, this does not filter non-string values —
+ * it assumes all values are already strings (as in LHAR export).
  */
 export declare function redactHeaders(headers: Record<string, string>): Record<string, string>;
-/**
- * Select a safe subset of request/response headers for capture.
- *
- * - Drops sensitive headers (see `SENSITIVE_HEADERS`)
- * - Keeps only string-valued headers (Node can represent multi-valued headers as arrays)
- */
-export declare function selectHeaders(headers: Record<string, any>): Record<string, string>;
 //# sourceMappingURL=headers.d.ts.map

package/dist/http/headers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/http/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,aAY5B,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB"}
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/http/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAInE;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB"}

package/dist/http/headers.js

@@ -1,30 +1,18 @@
 /**
- * Shared header redaction utilities.
+ * Header redaction utilities for captures and LHAR export.
  *
- * Context Lens captures and exports some headers for debugging and provenance,
- * but must never persist secrets (API keys, cookies, auth challenges, etc.).
- *
- * Keep this as the single source of truth to avoid drift between "capture" and "export".
+ * `selectHeaders` and `SENSITIVE_HEADERS` are re-exported from @contextio/core
+ * (single source of truth). `redactHeaders` is context-lens-specific: it
+ * strips sensitive headers from an already-string-valued map (used in LHAR
+ * export where multi-value arrays are not possible).
  */
-/** Case-insensitive set of header names that must never be persisted/exported. */
-export const SENSITIVE_HEADERS = new Set([
-    "authorization",
-    "x-api-key",
-    "cookie",
-    "set-cookie",
-    "x-target-url",
-    "proxy-authorization",
-    "x-auth-token",
-    "x-forwarded-authorization",
-    "www-authenticate",
-    "proxy-authenticate",
-    "x-goog-api-key",
-]);
+export { SENSITIVE_HEADERS, selectHeaders } from "@contextio/core";
+import { SENSITIVE_HEADERS } from "@contextio/core";
 /**
- * Remove sensitive headers from a header map.
+ * Remove sensitive headers from a string-valued header map.
  *
- * @param headers - Header map (string -> string)
- * @returns A new object with sensitive headers removed.
+ * Unlike `selectHeaders`, this does not filter non-string values —
+ * it assumes all values are already strings (as in LHAR export).
  */
 export function redactHeaders(headers) {
     const result = {};
@@ -35,20 +23,4 @@ export function redactHeaders(headers) {
     }
     return result;
 }
-/**
- * Select a safe subset of request/response headers for capture.
- *
- * - Drops sensitive headers (see `SENSITIVE_HEADERS`)
- * - Keeps only string-valued headers (Node can represent multi-valued headers as arrays)
- */
-export function selectHeaders(headers) {
-    const result = {};
-    for (const [key, val] of Object.entries(headers)) {
-        if (SENSITIVE_HEADERS.has(key.toLowerCase()))
-            continue;
-        if (typeof val === "string")
-            result[key] = val;
-    }
-    return result;
-}
 //# sourceMappingURL=headers.js.map

package/dist/http/headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../src/http/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,eAAe;IACf,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,qBAAqB;IACrB,cAAc;IACd,2BAA2B;IAC3B,kBAAkB;IAClB,oBAAoB;IACpB,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,OAA+B;IAE/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QACvD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,OAA4B;IAE5B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QACvD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../src/http/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,OAA+B;IAE/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QACvD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/proxy/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/proxy/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,OAAO,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAgB,eAAe,IAAI,WAAW,CAuC7C"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/proxy/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,OAAO,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAgB,eAAe,IAAI,WAAW,CAuD7C"}

package/dist/proxy/config.js

@@ -21,7 +21,20 @@ export function loadProxyConfig() {
     const bindHost = process.env.CONTEXT_LENS_BIND_HOST || "127.0.0.1";
     const port = parseInt(process.env.CONTEXT_LENS_PROXY_PORT || "4040", 10);
     // Do not honor `x-target-url` unless explicitly enabled.
+    // Intended for Docker multi-container setups where the analysis server
+    // sends captures back through the proxy at a known upstream URL.
+    //
+    // WARNING: combining this with a non-loopback bind host lets any client
+    // on the network redirect proxy traffic to arbitrary URLs (SSRF). Only
+    // set both when the proxy is on a private Docker bridge with no external
+    // exposure.
     const allowTargetOverride = process.env.CONTEXT_LENS_ALLOW_TARGET_OVERRIDE === "1";
+    const loopbackHosts = ["127.0.0.1", "::1", "localhost"];
+    if (allowTargetOverride && !loopbackHosts.includes(bindHost)) {
+        console.warn("Warning: CONTEXT_LENS_ALLOW_TARGET_OVERRIDE=1 is set with a non-loopback " +
+            `bind host (${bindHost}). Any client that can reach the proxy can redirect ` +
+            "requests to arbitrary URLs. Only use this on a private Docker bridge network.");
+    }
     const captureDir = process.env.CONTEXT_LENS_CAPTURE_DIR ||
         join(homedir(), ".context-lens", "captures");
     const ingestUrl = process.env.CONTEXT_LENS_INGEST_URL || null;

package/dist/proxy/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/proxy/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAcjC,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAc;QAC3B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,wBAAwB;QACnE,SAAS,EACP,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,2BAA2B;QACnE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,qBAAqB;QAClE,MAAM,EACJ,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,2CAA2C;QAC7C,gBAAgB,EACd,OAAO,CAAC,GAAG,CAAC,+BAA+B;YAC3C,qCAAqC;QACvC,MAAM,EACJ,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,+CAA+C;KAClD,CAAC;IAEF,uDAAuD;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,WAAW,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAEzE,yDAAyD;IACzD,MAAM,mBAAmB,GACvB,OAAO,CAAC,GAAG,CAAC,kCAAkC,KAAK,GAAG,CAAC;IAEzD,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;IAE/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC;IAE9D,OAAO;QACL,SAAS;QACT,QAAQ;QACR,IAAI;QACJ,mBAAmB;QACnB,UAAU;QACV,SAAS;KACV,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/proxy/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAcjC,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAc;QAC3B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,wBAAwB;QACnE,SAAS,EACP,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,2BAA2B;QACnE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,qBAAqB;QAClE,MAAM,EACJ,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,2CAA2C;QAC7C,gBAAgB,EACd,OAAO,CAAC,GAAG,CAAC,+BAA+B;YAC3C,qCAAqC;QACvC,MAAM,EACJ,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,+CAA+C;KAClD,CAAC;IAEF,uDAAuD;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,WAAW,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAEzE,yDAAyD;IACzD,uEAAuE;IACvE,iEAAiE;IACjE,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,YAAY;IACZ,MAAM,mBAAmB,GACvB,OAAO,CAAC,GAAG,CAAC,kCAAkC,KAAK,GAAG,CAAC;IAEzD,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,mBAAmB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,IAAI,CACV,2EAA2E;YACzE,cAAc,QAAQ,sDAAsD;YAC5E,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;IAE/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC;IAE9D,OAAO;QACL,SAAS;QACT,QAAQ;QACR,IAAI;QACJ,mBAAmB;QACnB,UAAU;QACV,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/proxy/server.js

@@ -15,6 +15,25 @@
 import { createProxy } from "@contextio/proxy";
 import { createCaptureIngestor, createCaptureWriter } from "./capture.js";
 import { loadProxyConfig } from "./config.js";
+async function loadRedactPlugin() {
+    const preset = process.env.CONTEXT_LENS_REDACT;
+    if (!preset)
+        return null;
+    try {
+        const { createRedactPlugin } = await import("@contextio/redact");
+        const reversible = process.env.CONTEXT_LENS_REHYDRATE === "1";
+        const plugin = createRedactPlugin({
+            preset: preset,
+            reversible,
+        });
+        console.log(`🔒 Redaction enabled (preset: ${preset}, ${reversible ? "reversible" : "one-way"})`);
+        return plugin;
+    }
+    catch (err) {
+        console.error("Failed to load redact plugin:", err instanceof Error ? err.message : String(err));
+        return null;
+    }
+}
 async function loadPluginsFromEnv() {
     const pluginsEnv = process.env.CONTEXT_LENS_PROXY_PLUGINS;
     if (!pluginsEnv)
@@ -57,6 +76,9 @@ async function loadPluginsFromEnv() {
 async function main() {
     const config = loadProxyConfig();
     const plugins = await loadPluginsFromEnv();
+    const redactPlugin = await loadRedactPlugin();
+    if (redactPlugin)
+        plugins.unshift(redactPlugin);
     // Add a capture plugin that either writes to disk or POSTs to ingest URL.
     let onCapture;
     if (config.ingestUrl) {