devinfra-bridge 0.0.0-stage → 0.1.0-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 devinfra-bridge contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,61 @@
-# Temporary Holding Version
+# devinfra_bridge
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+本机 proxy daemon：接收 Claude Code 的原生 Messages 请求，附加机器已有的 ByteCloud JWT，转发到固定 llm gateway。使用 TypeScript，要求 Node.js >=22；无生产 npm 依赖。当前实际验收环境为 Node.js 22，构建目标为 node22。
+
+## 开发与运行
+
+```bash
+npm ci
+npm run typecheck
+npm run lint
+npm test
+npm run build
+node dist/main.js --version --json
+node dist/main.js serve --config /absolute/path/bridge.json
+```
+
+`bridge.json`：
+
+```json
+{
+  "config_version": 1,
+  "gateway_origin": "https://your-gateway.example",
+  "auth": {
+    "mode": "bytedcli",
+    "executable": "/absolute/path/bytedcli"
+  }
+}
+```
+
+`state_root` 可选，默认 `~/.local/state/devinfra-bridge`。使用同一 OS 用户及其认证环境启动 daemon；bytedcli 子进程继承 `BYTEDCLI_CLOUD_SITE` / `BYTEDCLI_PROFILE`，无 site 覆盖，固定 `--as user`，不执行登录、不读取 refresh token。
+
+正常启动后 stdout 输出一行就绪 JSON。固定监听 `127.0.0.1:18765`；端口占用则退出。用 SIGINT/SIGTERM 停止，最多 10 秒排空 HTTP 请求，随后清理资源。
+
+## 首版行为
+
+- 只转发 `POST /v1/messages`（可带 `?beta=true`）；原始 body、model、effort、thinking、工具字段、JSON/SSE 字节不转换。
+- 替换员工 JWT header，附加 `x-use-agent-plan: 1`、`X-Devinfra-Agent: claude-code`；剥离客户端 Authorization、x-api-key、Cookie 等凭据。
+- `devinfra-bridge:cc` 是 CC 配置中的固定占位 token，本版不校验；来源 header 表示服务路由，不能证明发送进程身份。
+- 背压、取消、分阶段超时；401 等上游错误原样返回，模型请求不自动重试。
+- `/v1/models`、`count_tokens`、管理接口返回 404；CLI、安装、模型配置、配置恢复、目录查询由其他项目负责。
+
+更多见 [开发说明](docs/development.md)、[验收说明](docs/acceptance.md)和 [实施计划](docs/superpowers/plans/2026-11-09-cc-gateway-integration.md)。
+
+## npm 包与发布
+
+包名 `devinfra-bridge`，首版 `0.1.0-alpha.1`，MIT 许可证。发布到公网 npm 的 `alpha` 标签，供外部 CLI 联调；真实 CC + Gateway 验收见验收说明。
+
+```bash
+# 开发时验证发布产物，不上传；当前功能分支也能运行
+npm run publish:dry
+
+# 在 main/master/develop 发布；脚本先检查，最后确认后才上传
+./scripts/publish.sh
+
+# 确认需要从其他分支发布时，只跳过分支检查
+./scripts/publish.sh --force
+```
+
+脚本不会自动修改版本、暂存或提交。预发布版本自动使用 alpha/beta/rc/next 标签，正式版本使用 latest；检查包括 typecheck、lint、测试、构建与解包运行。`npm publish` 本身也通过 `prepublishOnly` 执行这些检查。
+
+外部 CLI 可添加依赖 `devinfra-bridge@alpha`，通过 Node.js >=22 启动安装包中的 `dist/main.js serve --config ...`，或导入 `startDaemon`。本包没有 `bin` 命令，用户 CLI 在独立项目中提供。

package/dist/agents/registry.d.ts

@@ -0,0 +1,2 @@
+import type { AgentRoute } from "./types.js";
+export declare const AGENT_ROUTES: readonly AgentRoute[];

package/dist/agents/types.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { ProxyContext } from "../proxy/server.js";
+export interface AgentRoute {
+    agent: string;
+    path: string;
+    method: string;
+    forward(req: IncomingMessage, res: ServerResponse, context: ProxyContext, signal: AbortSignal, agent: string): Promise<void>;
+}

package/dist/auth/bytedcli-provider.d.ts

@@ -0,0 +1,22 @@
+import { type CredentialProvider } from "./credential-provider.js";
+export declare const JWT_ARGS: string[];
+export interface BytedcliOptions {
+    timeoutMs?: number;
+    outputBytes?: number;
+    cacheMs?: number;
+}
+export declare class BytedcliProvider implements CredentialProvider {
+    private readonly executable;
+    private readonly controller;
+    private pending?;
+    private cached?;
+    private readonly timeoutMs;
+    private readonly outputBytes;
+    private readonly cacheMs;
+    constructor(executable: string, options?: BytedcliOptions);
+    getJwt({ signal }?: {
+        signal?: AbortSignal;
+    }): Promise<string>;
+    private acquire;
+    close(): Promise<void>;
+}

package/dist/auth/credential-provider.d.ts

@@ -0,0 +1,13 @@
+import type { AuthConfig } from "../config/types.js";
+export interface CredentialProvider {
+    getJwt(options?: {
+        signal?: AbortSignal;
+    }): Promise<string>;
+    close(): Promise<void>;
+}
+export declare class CredentialError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare function validateJwt(value: unknown): string;
+export declare function createCredentialProvider(config: AuthConfig): CredentialProvider;

package/dist/auth/direct-jwt-provider.d.ts

@@ -0,0 +1,14 @@
+import type { AuthConfig } from "../config/types.js";
+import { type CredentialProvider } from "./credential-provider.js";
+export declare class DirectJwtProvider implements CredentialProvider {
+    private readonly config;
+    private closed;
+    private readonly snapshot?;
+    constructor(config: Exclude<AuthConfig, {
+        mode: "bytedcli";
+    }>);
+    getJwt({ signal }?: {
+        signal?: AbortSignal;
+    }): Promise<string>;
+    close(): Promise<void>;
+}

package/dist/config/load.d.ts

@@ -0,0 +1,7 @@
+import type { DaemonConfig } from "./types.js";
+export declare class ConfigError extends Error {
+    readonly code = "INVALID_CONFIG";
+}
+export declare function parseDaemonConfig(value: unknown): DaemonConfig;
+export declare function loadDaemonConfig(path: string): Promise<DaemonConfig>;
+export declare function assertSupportedNode(version?: string): void;

package/dist/config/types.d.ts

@@ -0,0 +1,27 @@
+export declare const HOST = "127.0.0.1";
+export declare const PORT = 18765;
+export declare const CC_PLACEHOLDER_TOKEN = "devinfra-bridge:cc";
+export type AuthConfig = {
+    mode: "bytedcli";
+    executable: string;
+} | {
+    mode: "direct-jwt";
+    file: string;
+} | {
+    mode: "direct-jwt";
+    env: string;
+};
+export interface DaemonConfig {
+    configVersion: 1;
+    gatewayOrigin: string;
+    stateRoot: string;
+    auth: AuthConfig;
+}
+export interface ProxyLimits {
+    bodyBytes: number;
+    bodyIdleMs: number;
+    concurrency: number;
+    headersMs: number;
+    streamIdleMs: number;
+}
+export declare const DEFAULT_LIMITS: Readonly<ProxyLimits>;

package/dist/daemon/daemon.d.ts

@@ -0,0 +1,10 @@
+import { type DaemonConfig, HOST, PORT } from "../config/types.js";
+export interface DaemonHandle {
+    instanceId: string;
+    host: typeof HOST;
+    port: typeof PORT;
+    close(options?: {
+        drainMs?: number;
+    }): Promise<void>;
+}
+export declare function startDaemon(config: DaemonConfig): Promise<DaemonHandle>;

package/dist/daemon/single-instance.d.ts

@@ -0,0 +1,3 @@
+import type { Server } from "node:http";
+export declare function bindSingleInstance(server: Server): Promise<void>;
+export declare function writeInstance(stateRoot: string, id: string, version: string): Promise<() => Promise<void>>;

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { assertSupportedNode, loadDaemonConfig, parseDaemonConfig } from "./config/load.js";
+export { CC_PLACEHOLDER_TOKEN, HOST, PORT } from "./config/types.js";
+export type { AuthConfig, DaemonConfig } from "./config/types.js";
+export { startDaemon } from "./daemon/daemon.js";
+export type { DaemonHandle } from "./daemon/daemon.js";
+export type { CredentialProvider } from "./auth/credential-provider.js";