fest-gateway 0.1.0

package/dist/server/config.js

@@ -0,0 +1,109 @@
+/**
+ * Configuration, entirely from the environment.
+ *
+ * Validated once at boot and printed as a redacted table, so a
+ * misconfiguration fails loudly at startup rather than lazily on the first
+ * developer's request.
+ */
+/**
+ * `/fest/`, `fest`, `//fest//` -> `/fest`; `/`, `""` and anything that is only
+ * slashes -> `""`. One leading slash, no trailing one, so callers can always
+ * write `${basePath}/rest` and `path.startsWith(basePath)` without a special
+ * case for the root deployment.
+ */
+export function normalizeBasePath(raw) {
+    const trimmed = raw.trim().replace(/^\/+/, "").replace(/\/+$/, "");
+    return trimmed === "" ? "" : `/${trimmed}`;
+}
+function basePathFrom(explicit, publicUrl) {
+    if (explicit !== null)
+        return normalizeBasePath(explicit);
+    try {
+        return normalizeBasePath(new URL(publicUrl).pathname);
+    }
+    catch {
+        // publicUrl is validated elsewhere; an unparseable one means no prefix
+        // rather than a boot failure in a code path about cosmetics.
+        return "";
+    }
+}
+function intFromEnv(name, fallback) {
+    const raw = process.env[name];
+    if (raw === undefined || raw.trim() === "")
+        return fallback;
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < 0) {
+        throw new Error(`${name} must be a non-negative integer, got ${JSON.stringify(raw)}`);
+    }
+    return n;
+}
+function boolFromEnv(name, fallback) {
+    const raw = process.env[name];
+    if (raw === undefined || raw.trim() === "")
+        return fallback;
+    const v = raw.trim().toLowerCase();
+    if (["1", "true", "yes", "on"].includes(v))
+        return true;
+    if (["0", "false", "no", "off"].includes(v))
+        return false;
+    throw new Error(`${name} must be a boolean, got ${JSON.stringify(raw)}`);
+}
+function stringFromEnv(name) {
+    const raw = process.env[name];
+    if (raw === undefined)
+        return null;
+    const trimmed = raw.trim();
+    return trimmed === "" ? null : trimmed;
+}
+function listFromEnv(name) {
+    const raw = process.env[name];
+    if (raw === undefined)
+        return [];
+    return raw
+        .split(",")
+        .map((s) => s.trim().toLowerCase())
+        .filter((s) => s !== "");
+}
+export function loadConfig() {
+    const level = (process.env.FEST_LOG_LEVEL ?? "info").trim();
+    if (!["debug", "info", "warn", "error"].includes(level)) {
+        throw new Error(`FEST_LOG_LEVEL must be debug|info|warn|error, got ${JSON.stringify(level)}`);
+    }
+    const upstream = (process.env.FEST_UPSTREAM_BASE_URL ?? "https://api.anthropic.com").trim();
+    try {
+        new URL(upstream);
+    }
+    catch {
+        throw new Error(`FEST_UPSTREAM_BASE_URL is not a valid URL: ${JSON.stringify(upstream)}`);
+    }
+    const port = intFromEnv("FEST_PORT", 8787);
+    const host = (process.env.FEST_HOST ?? "127.0.0.1").trim();
+    const publicUrl = (stringFromEnv("FEST_PUBLIC_URL") ?? `http://${host}:${port}`).replace(/\/+$/, "");
+    return {
+        port,
+        host,
+        upstreamBaseUrl: upstream.replace(/\/+$/, ""),
+        usageLogPath: (process.env.FEST_USAGE_LOG ?? "./data/usage.jsonl").trim(),
+        dbPath: (process.env.FEST_DB ?? "./data/fest.db").trim(),
+        logLevel: level,
+        requireIdentity: boolFromEnv("FEST_REQUIRE_IDENTITY", false),
+        routesPath: (process.env.FEST_ROUTES ?? "").trim() || null,
+        secureCookies: boolFromEnv("FEST_SECURE_COOKIES", false),
+        publicUrl,
+        basePath: basePathFrom(stringFromEnv("FEST_BASE_PATH"), publicUrl),
+        googleClientId: stringFromEnv("FEST_GOOGLE_CLIENT_ID"),
+        googleClientSecret: stringFromEnv("FEST_GOOGLE_CLIENT_SECRET"),
+        githubClientId: stringFromEnv("FEST_GITHUB_CLIENT_ID"),
+        githubClientSecret: stringFromEnv("FEST_GITHUB_CLIENT_SECRET"),
+        allowedEmailDomains: listFromEnv("FEST_ALLOWED_EMAIL_DOMAINS"),
+    };
+}
+/** Safe to log: secrets are redacted, never spread through verbatim. */
+export function describeConfig(cfg) {
+    return {
+        ...cfg,
+        googleClientSecret: cfg.googleClientSecret === null ? null : "[redacted]",
+        githubClientSecret: cfg.githubClientSecret === null ? null : "[redacted]",
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/server/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../server/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkEH;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,QAAuB,EAAE,SAAiB;IAC9D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,6DAA6D;QAC7D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,QAAgB;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wCAAwC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAiB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC5D,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA2B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC,IAAI,EAA4B,CAAC;IACtF,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5F,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,SAAS,GAAG,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CACtF,MAAM,EACN,EAAE,CACH,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,oBAAoB,CAAC,CAAC,IAAI,EAAE;QACzE,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACxD,QAAQ,EAAE,KAAK;QACf,eAAe,EAAE,WAAW,CAAC,uBAAuB,EAAE,KAAK,CAAC;QAC5D,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI;QAC1D,aAAa,EAAE,WAAW,CAAC,qBAAqB,EAAE,KAAK,CAAC;QACxD,SAAS;QACT,QAAQ,EAAE,YAAY,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;QAClE,cAAc,EAAE,aAAa,CAAC,uBAAuB,CAAC;QACtD,kBAAkB,EAAE,aAAa,CAAC,2BAA2B,CAAC;QAC9D,cAAc,EAAE,aAAa,CAAC,uBAAuB,CAAC;QACtD,kBAAkB,EAAE,aAAa,CAAC,2BAA2B,CAAC;QAC9D,mBAAmB,EAAE,WAAW,CAAC,4BAA4B,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,GAAe;IAC5C,OAAO;QACL,GAAG,GAAG;QACN,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY;QACzE,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY;KAC1E,CAAC;AACJ,CAAC"}

package/dist/server/credentials/provider.js

@@ -0,0 +1,70 @@
+/**
+ * Secret references, and the one place they are turned into values.
+ *
+ * A credential is configured as a REFERENCE — `{env:FIREWORKS_API_KEY}` — not
+ * as a literal. Three things follow from that, and all three are the reason it
+ * is worth the indirection:
+ *
+ *  1. The routing config can be committed, diffed and pasted into an issue.
+ *  2. The database holds no secrets by default, so a database dump is not a
+ *     credential dump.
+ *  3. Everything Fest records about a credential is the reference, never the
+ *     value. `source: "env:FIREWORKS_API_KEY"` is meaningful to an operator and
+ *     useless to an attacker.
+ *
+ * The resolved value is wrapped in `NonPersistable` so it cannot be logged,
+ * serialised or stored by accident — see `secret/non-persistable.ts`.
+ */
+import { NonPersistable } from "../secret/non-persistable.js";
+/** `{env:NAME}` — the only reference form supported today. */
+const ENV_REF = /^\{env:([A-Za-z_][A-Za-z0-9_]*)\}$/;
+export function parseSecretRef(raw) {
+    const match = ENV_REF.exec(raw.trim());
+    if (match === null)
+        return null;
+    const name = match[1];
+    return { kind: "env", name, source: `env:${name}` };
+}
+/**
+ * Describe why a raw string is not a usable reference.
+ *
+ * Split from `parseSecretRef` so config validation can explain itself. The
+ * common mistake is pasting the secret itself, and that deserves a message
+ * saying so rather than a generic parse failure — otherwise the fix people
+ * reach for is "quote it differently", and the key ends up in git.
+ */
+export function explainSecretRef(raw) {
+    const value = raw.trim();
+    if (ENV_REF.test(value))
+        return null;
+    if (value === "")
+        return "credential is empty; expected {env:NAME}";
+    if (!value.startsWith("{")) {
+        return (`credential must be a reference like {env:NAME}, not a literal value. ` +
+            `Put the secret in an environment variable and reference it, so it stays out of config and out of the database.`);
+    }
+    return `credential ${JSON.stringify(value)} is not a valid reference; expected {env:NAME}`;
+}
+/**
+ * Resolve against the process environment.
+ *
+ * Reads on every call rather than snapshotting at boot: an operator rotating a
+ * key should not have to reason about whether Fest cached the old one. The read
+ * is a property lookup, so the cost is irrelevant next to a network round trip.
+ *
+ * An empty or whitespace-only variable counts as MISSING, not as a credential.
+ * `FIREWORKS_API_KEY=` in a .env file is overwhelmingly a mistake, and treating
+ * it as a real value turns a clear "not configured" into a confusing 401 from a
+ * provider.
+ */
+export function createEnvResolver(env = process.env) {
+    return {
+        resolve(ref) {
+            const raw = env[ref.name];
+            if (raw === undefined || raw.trim() === "")
+                return null;
+            return { source: ref.source, value: new NonPersistable(raw.trim()) };
+        },
+    };
+}
+//# sourceMappingURL=provider.js.map

package/dist/server/credentials/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../server/credentials/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,8DAA8D;AAC9D,MAAM,OAAO,GAAG,oCAAoC,CAAC;AASrD,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;IAChC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,0CAA0C,CAAC;IACpE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CACL,uEAAuE;YACvE,gHAAgH,CACjH,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gDAAgD,CAAC;AAC7F,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,OAAO;QACL,OAAO,CAAC,GAAc;YACpB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;YACxD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/credentials/resolve.js

@@ -0,0 +1,89 @@
+/**
+ * Decide which credential serves a request, and record every candidate.
+ *
+ * The output is as much an audit trail as a decision. `credentialsConsidered`
+ * goes onto every usage record because silent credential substitution is a
+ * billing incident: the developer believes their subscription paid, the org is
+ * invoiced, and without this list nothing anywhere records that a choice was
+ * even made.
+ *
+ * Two rules this module exists to make structural rather than customary:
+ *
+ *  1. **An inbound subscription bearer is never used for a substitute route.**
+ *     It was issued by Anthropic for Anthropic. Forwarding it to Fireworks
+ *     would disclose a developer's personal credential to a third party. It is
+ *     recorded as `skipped`, with the reason, so the decision is visible.
+ *
+ *  2. **A missing server credential fails the request.** It does not quietly
+ *     fall back to the pass-through path. Falling back would silently serve a
+ *     different model than the one asked for, on a credential the requester did
+ *     not choose — the request succeeding is precisely what makes that bad.
+ */
+export function resolveCredential(decision, inbound, secrets) {
+    const considered = [];
+    // ── pass-through ────────────────────────────────────────────────────────────
+    if (decision.pipeline === "passthrough" || decision.upstream === null) {
+        if (inbound === null) {
+            considered.push({
+                source: "inbound",
+                result: "missing",
+                reason: "no credential on the request",
+            });
+            // Not an error here: upstream decides. Anthropic's own 401 is a better
+            // message than anything Fest could invent, and the client's refresh
+            // latch is waiting for exactly that response.
+            return { ok: true, secret: null, source: "inbound", considered };
+        }
+        considered.push({
+            source: inbound.isSubscription ? "inbound_subscription" : "inbound_key",
+            result: "used",
+        });
+        return { ok: true, secret: null, source: considered[0]?.source ?? "inbound", considered };
+    }
+    // ── substitute ──────────────────────────────────────────────────────────────
+    const upstream = decision.upstream;
+    if (inbound !== null && inbound.isSubscription) {
+        considered.push({
+            source: "inbound_subscription",
+            result: "skipped",
+            reason: `not sent to ${upstream.id}: a Claude subscription credential is only valid at Anthropic, and forwarding it would disclose it to another vendor`,
+        });
+    }
+    else if (inbound !== null) {
+        considered.push({
+            source: "inbound_key",
+            result: "skipped",
+            reason: `not sent to ${upstream.id}: an inbound key is scoped to its own issuer`,
+        });
+    }
+    const resolvedSecret = secrets.resolve(upstream.credential);
+    if (resolvedSecret === null) {
+        considered.push({
+            source: upstream.credential.source,
+            result: "missing",
+            reason: "environment variable is unset or empty",
+        });
+        const model = JSON.stringify(decision.requestedModel ?? "?");
+        // No route means no route to name: this is the key-posture default for
+        // Anthropic models, not an entry in the file. Naming a route id of "?"
+        // sends the operator looking through routes.json for something that was
+        // never there.
+        const sends = decision.route === null
+            ? `Fest: ${model} defaults to upstream ${JSON.stringify(upstream.id)}`
+            : `Fest: route ${JSON.stringify(decision.route.id)} sends ${model} to upstream ${JSON.stringify(upstream.id)}`;
+        return {
+            ok: false,
+            considered,
+            message: `${sends}, whose credential ${upstream.credential.source} is not set on the Fest server. ` +
+                `This request was refused rather than served on a different credential.`,
+        };
+    }
+    considered.push({ source: resolvedSecret.source, result: "used" });
+    return {
+        ok: true,
+        secret: resolvedSecret.value,
+        source: resolvedSecret.source,
+        considered,
+    };
+}
+//# sourceMappingURL=resolve.js.map

package/dist/server/credentials/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../server/credentials/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA0BH,MAAM,UAAU,iBAAiB,CAC/B,QAAuB,EACvB,OAAiC,EACjC,OAAuB;IAEvB,MAAM,UAAU,GAAwB,EAAE,CAAC;IAE3C,+EAA+E;IAC/E,IAAI,QAAQ,CAAC,QAAQ,KAAK,aAAa,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,8BAA8B;aACvC,CAAC,CAAC;YACH,uEAAuE;YACvE,oEAAoE;YACpE,8CAA8C;YAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QACnE,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa;YACvE,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS,EAAE,UAAU,EAAE,CAAC;IAC5F,CAAC;IAED,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEnC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC/C,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,sBAAsB;YAC9B,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,eAAe,QAAQ,CAAC,EAAE,sHAAsH;SACzJ,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,eAAe,QAAQ,CAAC,EAAE,8CAA8C;SACjF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;YAClC,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,wCAAwC;SACjD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;QAC7D,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,eAAe;QACf,MAAM,KAAK,GACT,QAAQ,CAAC,KAAK,KAAK,IAAI;YACrB,CAAC,CAAC,SAAS,KAAK,yBAAyB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YACtE,CAAC,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,KAAK,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACnH,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU;YACV,OAAO,EACL,GAAG,KAAK,sBAAsB,QAAQ,CAAC,UAAU,CAAC,MAAM,kCAAkC;gBAC1F,wEAAwE;SAC3E,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,cAAc,CAAC,KAAK;QAC5B,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/server/http/body.js

@@ -0,0 +1,66 @@
+/**
+ * Request body handling for a byte-for-byte proxy.
+ *
+ * The body is read as opaque bytes and forwarded unchanged. It is never
+ * `JSON.parse`d and re-serialised, because a round-trip changes key order,
+ * whitespace, unicode escaping and number formatting — and on the subscription
+ * path Anthropic validates the request shape. Phase 0 showed the body even
+ * carries its own attribution block inside `system[0].text`
+ * (`x-anthropic-billing-header: cc_version=…`), so the payload is not ours to
+ * normalise.
+ *
+ * To route or report on a request we still need to know the model, so we parse
+ * a *copy* for inspection only. `peekRequest` is read-only by construction: it
+ * returns primitives and never hands back the parsed object.
+ */
+/** Read the full body. Bodies are prompts: large, but bounded. */
+export async function readBodyBytes(req, maxBytes) {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of req) {
+        total += chunk.byteLength;
+        if (total > maxBytes)
+            return { tooLarge: true };
+        chunks.push(chunk);
+    }
+    // Assembled into a Uint8Array backed by a plain ArrayBuffer, which is what
+    // `fetch` accepts as a BodyInit. `Buffer.concat` would copy just the same,
+    // so this costs nothing extra and avoids an unsound cast at the fetch call —
+    // where a mistake would mean sending the wrong bytes on a path whose whole
+    // contract is that the bytes are unchanged.
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return out;
+}
+export function isTooLarge(v) {
+    return !(v instanceof Uint8Array);
+}
+/**
+ * Inspect a body copy for the few fields Fest needs. Tolerant by design: a
+ * body we cannot parse is still forwarded verbatim, we just report less about
+ * it. Failing a request because our own telemetry could not read it would be
+ * the wrong trade.
+ */
+export function peekRequest(bytes) {
+    try {
+        const parsed = JSON.parse(Buffer.from(bytes).toString("utf8"));
+        if (parsed === null || typeof parsed !== "object") {
+            return { model: null, stream: false, maxTokens: null };
+        }
+        const obj = parsed;
+        const maxTokens = obj["max_tokens"];
+        return {
+            model: typeof obj["model"] === "string" ? obj["model"] : null,
+            stream: obj["stream"] === true,
+            maxTokens: typeof maxTokens === "number" && Number.isFinite(maxTokens) ? maxTokens : null,
+        };
+    }
+    catch {
+        return { model: null, stream: false, maxTokens: null };
+    }
+}
+//# sourceMappingURL=body.js.map

package/dist/server/http/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../../server/http/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,QAAgB;IAEhB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAA4B,EAAE,CAAC;QACvD,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,4CAA4C;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAyC;IAClE,OAAO,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC;AACpC,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7D,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI;YAC9B,SAAS,EAAE,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;SAC1F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/server/http/errors.js

@@ -0,0 +1,144 @@
+/**
+ * Anthropic-shaped error responses.
+ *
+ * Fest's errors are rendered by a client it does not control, so the wire shape
+ * matters twice over: Claude Code parses `error.type` to decide whether to
+ * retry, and prints `error.message` verbatim to the developer. That message IS
+ * the user-facing UI — write it as something a developer can act on ("Fest: no
+ * identity token; set ANTHROPIC_BASE_URL to your /t/<token> URL"), not as an
+ * internal condition.
+ */
+import { redactSecrets } from "../secret/fingerprint.js";
+/** The exact envelope Anthropic uses, so the client's own parser accepts it. */
+export function anthropicError(type, message) {
+    return JSON.stringify({ type: "error", error: { type, message } });
+}
+/**
+ * Map an error type to its HTTP status.
+ *
+ * Learned the hard way: Claude Code retries 5xx aggressively — a single 501
+ * produced ten retries of one request, i.e. ten times the upstream load and a
+ * developer watching a hang. Any condition that will NOT improve on retry
+ * (missing/unknown identity token, unroutable model, malformed body) must be
+ * given a 4xx type. Reserve `api_error`/`overloaded_error` for genuinely
+ * transient failures where a retry is the correct client behaviour.
+ */
+export function statusForErrorType(type) {
+    switch (type) {
+        case "invalid_request_error":
+            return 400;
+        case "authentication_error":
+            return 401;
+        case "permission_error":
+            return 403;
+        case "not_found_error":
+            return 404;
+        case "rate_limit_error":
+            return 429;
+        case "api_error":
+            return 500;
+        case "overloaded_error":
+            return 529;
+    }
+}
+/**
+ * How much of an upstream's error message to keep.
+ *
+ * Longer than the 200 chars used for exception strings, deliberately. An
+ * exception string is self-describing by its first clause; a provider's
+ * validation error is not — the actionable part is a field path that can sit
+ * well into the text ("context_management.edits.0: Extra inputs are not
+ * permitted"), and a provider may echo a chunk of the offending request before
+ * saying what was wrong with it. Truncating to 200 reliably cut the answer off.
+ */
+const MAX_UPSTREAM_MESSAGE = 500;
+/**
+ * Best-effort type for an upstream that sent no parseable error envelope.
+ *
+ * Derived from the status so `error_type` is never null on a failed request:
+ * a row that knows only "400" is barely more useful than no row, and the
+ * dashboard already groups by this column.
+ */
+function typeForStatus(status) {
+    switch (status) {
+        case 400:
+            return "invalid_request_error";
+        case 401:
+            return "authentication_error";
+        case 403:
+            return "permission_error";
+        case 404:
+            return "not_found_error";
+        case 429:
+            return "rate_limit_error";
+        case 529:
+            return "overloaded_error";
+        default:
+            return status >= 500 ? "api_error" : "invalid_request_error";
+    }
+}
+function firstString(...candidates) {
+    for (const c of candidates) {
+        if (typeof c === "string" && c.trim() !== "")
+            return c.trim();
+    }
+    return null;
+}
+/**
+ * Read a failed upstream response into something worth storing.
+ *
+ * Fest relayed these bodies to the client and recorded nothing but the status,
+ * so the one field a developer needs — WHY the provider refused — existed only
+ * in their terminal, and only until it scrolled. Every non-2xx landed in the
+ * database with `error_type` and `error_message` null.
+ *
+ * Shapes handled: Anthropic and Fireworks both nest `{ error: { type, message } }`;
+ * some gateways flatten it, or send `error` as a bare string, or send no JSON at
+ * all. An unparseable body is not a failure to report — the raw text is the
+ * message, truncated. The result is always populated.
+ */
+export function describeUpstreamFailure(status, text) {
+    const fallbackType = typeForStatus(status);
+    let type = null;
+    let message = null;
+    try {
+        const parsed = JSON.parse(text);
+        if (typeof parsed === "object" && parsed !== null) {
+            const top = parsed;
+            const err = top["error"];
+            if (typeof err === "object" && err !== null) {
+                const e = err;
+                type = firstString(e["type"], e["code"]);
+                message = firstString(e["message"], e["detail"]);
+            }
+            else {
+                message = firstString(err);
+            }
+            type ??= firstString(top["type"] === "error" ? null : top["type"], top["code"]);
+            message ??= firstString(top["message"], top["detail"]);
+        }
+    }
+    catch {
+        // Not JSON. The body itself is the most informative thing we have.
+    }
+    return {
+        text,
+        type: type ?? fallbackType,
+        // Redacted on the way in, not on the way out: this string is about to be
+        // persisted, and an upstream that echoes the offending request back could
+        // echo a credential header with it.
+        message: redactSecrets(message ?? text).slice(0, MAX_UPSTREAM_MESSAGE),
+    };
+}
+/**
+ * A complete SSE `error` frame, terminated by the blank line.
+ *
+ * Used when an upstream dies mid-stream: the status line and headers are long
+ * gone, so the only way left to tell the client anything is an in-band error
+ * event. Note there is no status to choose here, which is another reason to
+ * fail fast with a 4xx before the first byte whenever that is possible.
+ */
+export function sseErrorEvent(type, message) {
+    return `event: error\ndata: ${anthropicError(type, message)}\n\n`;
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/http/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../server/http/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAWzD,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,IAAwB,EAAE,OAAe;IACtE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,uBAAuB;YAC1B,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB;YACzB,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,WAAW;YACd,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAUjC;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,uBAAuB,CAAC;QACjC,KAAK,GAAG;YACN,OAAO,sBAAsB,CAAC;QAChC,KAAK,GAAG;YACN,OAAO,kBAAkB,CAAC;QAC5B,KAAK,GAAG;YACN,OAAO,iBAAiB,CAAC;QAC3B,KAAK,GAAG;YACN,OAAO,kBAAkB,CAAC;QAC5B,KAAK,GAAG;YACN,OAAO,kBAAkB,CAAC;QAC5B;YACE,OAAO,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,UAAqB;IAC3C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,IAAY;IAClE,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,OAAO,GAAkB,IAAI,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,CAAC,GAAG,GAA8B,CAAC;gBACzC,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACzC,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,KAAK,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAChF,OAAO,KAAK,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;IAED,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,IAAI,IAAI,YAAY;QAC1B,yEAAyE;QACzE,0EAA0E;QAC1E,oCAAoC;QACpC,OAAO,EAAE,aAAa,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC;KACvE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAwB,EAAE,OAAe;IACrE,OAAO,uBAAuB,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;AACpE,CAAC"}