grok-cli-to-openai-compatible 1.2.0

package/dist/utils/async-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-handler.js","sourceRoot":"","sources":["../../src/utils/async-handler.ts"],"names":[],"mappings":";;AAQA,oCAIC;AAJD,SAAgB,YAAY,CAAC,EAAuB;IAClD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC;AACJ,CAAC"}

package/dist/utils/id.d.ts

@@ -0,0 +1,6 @@
+export declare function createId(): string;
+export declare function createRequestId(): string;
+export declare function createChatCompletionId(): string;
+export declare function createApiKeySecret(): string;
+export declare function apiKeyPrefix(rawKey: string): string;
+//# sourceMappingURL=id.d.ts.map

package/dist/utils/id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/utils/id.ts"],"names":[],"mappings":"AAEA,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/utils/id.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createId = createId;
+exports.createRequestId = createRequestId;
+exports.createChatCompletionId = createChatCompletionId;
+exports.createApiKeySecret = createApiKeySecret;
+exports.apiKeyPrefix = apiKeyPrefix;
+const node_crypto_1 = require("node:crypto");
+function createId() {
+    return (0, node_crypto_1.randomUUID)();
+}
+function createRequestId() {
+    return `req_${(0, node_crypto_1.randomBytes)(12).toString('hex')}`;
+}
+function createChatCompletionId() {
+    return `chatcmpl_${(0, node_crypto_1.randomBytes)(12).toString('hex')}`;
+}
+function createApiKeySecret() {
+    return `gk_live_${(0, node_crypto_1.randomBytes)(24).toString('base64url')}`;
+}
+function apiKeyPrefix(rawKey) {
+    return rawKey.slice(0, 16);
+}
+//# sourceMappingURL=id.js.map

package/dist/utils/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/utils/id.ts"],"names":[],"mappings":";;AAEA,4BAEC;AAED,0CAEC;AAED,wDAEC;AAED,gDAEC;AAED,oCAEC;AApBD,6CAAsD;AAEtD,SAAgB,QAAQ;IACtB,OAAO,IAAA,wBAAU,GAAE,CAAC;AACtB,CAAC;AAED,SAAgB,eAAe;IAC7B,OAAO,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,SAAgB,sBAAsB;IACpC,OAAO,YAAY,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAgB,kBAAkB;IAChC,OAAO,WAAW,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAgB,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,3 @@
+import pino from 'pino';
+export declare const logger: pino.Logger<never, boolean>;
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,eAAO,MAAM,MAAM,6BAyBjB,CAAC"}

package/dist/utils/logger.js

@@ -0,0 +1,34 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logger = void 0;
+const pino_1 = __importDefault(require("pino"));
+const env_1 = require("../config/env");
+exports.logger = (0, pino_1.default)({
+    level: env_1.env.LOG_LEVEL,
+    transport: env_1.env.isDev
+        ? {
+            target: 'pino-pretty',
+            options: {
+                colorize: true,
+                translateTime: 'SYS:standard',
+                ignore: 'pid,hostname',
+            },
+        }
+        : undefined,
+    base: { service: 'grok-openai-gateway' },
+    redact: {
+        paths: [
+            'req.headers.authorization',
+            'apiKey',
+            'api_key',
+            'key',
+            'password',
+            'ENCRYPTION_KEY',
+        ],
+        remove: true,
+    },
+});
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,uCAAoC;AAEvB,QAAA,MAAM,GAAG,IAAA,cAAI,EAAC;IACzB,KAAK,EAAE,SAAG,CAAC,SAAS;IACpB,SAAS,EACP,SAAG,CAAC,KAAK;QACP,CAAC,CAAC;YACE,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,cAAc;gBAC7B,MAAM,EAAE,cAAc;aACvB;SACF;QACH,CAAC,CAAC,SAAS;IACf,IAAI,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;IACxC,MAAM,EAAE;QACN,KAAK,EAAE;YACL,2BAA2B;YAC3B,QAAQ;YACR,SAAS;YACT,KAAK;YACL,UAAU;YACV,gBAAgB;SACjB;QACD,MAAM,EAAE,IAAI;KACb;CACF,CAAC,CAAC"}

package/dist/utils/openai-mapper.d.ts

@@ -0,0 +1,30 @@
+import type { GrokResponseMeta, OpenAiChatCompletion, OpenAiChatCompletionChunk, OpenAiModelList } from '../interfaces/openai.interface';
+import type { GrokJsonResult } from '../interfaces/grok.interface';
+export interface MapCompletionOptions {
+    completionId?: string;
+    reasoningContent?: string | null;
+    includeReasoning?: boolean;
+    grok?: GrokResponseMeta;
+}
+export declare function mapGrokToChatCompletion(model: string, result: GrokJsonResult, options?: MapCompletionOptions): OpenAiChatCompletion;
+export declare function mapTextDeltaChunk(model: string, content: string, completionId: string, created: number): OpenAiChatCompletionChunk;
+/**
+ * DeepSeek-compatible reasoning stream chunk.
+ * Also sets Grok alias `thought` to the same string.
+ */
+export declare function mapReasoningDeltaChunk(model: string, reasoningContent: string, completionId: string, created: number, includeGrokAlias?: boolean): OpenAiChatCompletionChunk;
+export declare function mapRoleChunk(model: string, completionId: string, created: number): OpenAiChatCompletionChunk;
+export declare function mapFinishChunk(model: string, completionId: string, created: number, stopReason?: string, grok?: GrokResponseMeta): OpenAiChatCompletionChunk;
+export declare function mapModelsList(models: string[]): OpenAiModelList;
+/**
+ * Build prompt from messages.
+ * Multi-turn: uses role + content only (DeepSeek-style: prior reasoning_content not required).
+ * If an assistant message only has reasoning_content, it is ignored unless content is empty
+ * and we fall back (should not normally happen).
+ */
+export declare function messagesToPrompt(messages: Array<{
+    role: string;
+    content: string;
+    reasoning_content?: string | null;
+}>): string;
+//# sourceMappingURL=openai-mapper.d.ts.map

package/dist/utils/openai-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-mapper.d.ts","sourceRoot":"","sources":["../../src/utils/openai-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,yBAAyB,EAEzB,eAAe,EAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,oBAAyB,GACjC,oBAAoB,CAiDtB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,yBAAyB,CAc3B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,gBAAgB,UAAO,GACtB,yBAAyB,CAoB3B;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,yBAAyB,CAc3B;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,gBAAgB,GACtB,yBAAyB,CAkB3B;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAQ/D;AAyBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,GACpF,MAAM,CAUR"}

package/dist/utils/openai-mapper.js

@@ -0,0 +1,176 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapGrokToChatCompletion = mapGrokToChatCompletion;
+exports.mapTextDeltaChunk = mapTextDeltaChunk;
+exports.mapReasoningDeltaChunk = mapReasoningDeltaChunk;
+exports.mapRoleChunk = mapRoleChunk;
+exports.mapFinishChunk = mapFinishChunk;
+exports.mapModelsList = mapModelsList;
+exports.messagesToPrompt = messagesToPrompt;
+const id_1 = require("./id");
+function mapGrokToChatCompletion(model, result, options = {}) {
+    const completionId = options.completionId ?? (0, id_1.createChatCompletionId)();
+    const includeReasoning = options.includeReasoning !== false;
+    const reasoning = includeReasoning && options.reasoningContent
+        ? options.reasoningContent
+        : null;
+    const message = {
+        role: 'assistant',
+        content: result.text ?? '',
+    };
+    if (includeReasoning && reasoning) {
+        message.reasoning_content = reasoning;
+        message.thought = reasoning; // Grok alias
+    }
+    else if (includeReasoning) {
+        message.reasoning_content = null;
+        message.thought = null;
+    }
+    const finishReason = mapStopReason(result.stopReason ?? options.grok?.stopReason);
+    const response = {
+        id: completionId,
+        object: 'chat.completion',
+        created: Math.floor(Date.now() / 1000),
+        model,
+        choices: [
+            {
+                index: 0,
+                message,
+                finish_reason: finishReason,
+                logprobs: null,
+            },
+        ],
+        usage: {
+            prompt_tokens: 0,
+            completion_tokens: 0,
+            total_tokens: 0,
+        },
+    };
+    const grok = buildGrokMeta(result, options.grok);
+    if (grok) {
+        response.grok = grok;
+    }
+    return response;
+}
+function mapTextDeltaChunk(model, content, completionId, created) {
+    return {
+        id: completionId,
+        object: 'chat.completion.chunk',
+        created,
+        model,
+        choices: [
+            {
+                index: 0,
+                delta: { content },
+                finish_reason: null,
+            },
+        ],
+    };
+}
+/**
+ * DeepSeek-compatible reasoning stream chunk.
+ * Also sets Grok alias `thought` to the same string.
+ */
+function mapReasoningDeltaChunk(model, reasoningContent, completionId, created, includeGrokAlias = true) {
+    const delta = {
+        reasoning_content: reasoningContent,
+    };
+    if (includeGrokAlias) {
+        delta.thought = reasoningContent;
+    }
+    return {
+        id: completionId,
+        object: 'chat.completion.chunk',
+        created,
+        model,
+        choices: [
+            {
+                index: 0,
+                delta,
+                finish_reason: null,
+            },
+        ],
+    };
+}
+function mapRoleChunk(model, completionId, created) {
+    return {
+        id: completionId,
+        object: 'chat.completion.chunk',
+        created,
+        model,
+        choices: [
+            {
+                index: 0,
+                delta: { role: 'assistant', content: '' },
+                finish_reason: null,
+            },
+        ],
+    };
+}
+function mapFinishChunk(model, completionId, created, stopReason, grok) {
+    const chunk = {
+        id: completionId,
+        object: 'chat.completion.chunk',
+        created,
+        model,
+        choices: [
+            {
+                index: 0,
+                delta: {},
+                finish_reason: mapStopReason(stopReason),
+            },
+        ],
+    };
+    if (grok && (grok.sessionId || grok.stopReason || grok.requestId)) {
+        chunk.grok = grok;
+    }
+    return chunk;
+}
+function mapModelsList(models) {
+    const data = models.map((id) => ({
+        id,
+        object: 'model',
+        created: Math.floor(Date.now() / 1000),
+        owned_by: 'xai',
+    }));
+    return { object: 'list', data };
+}
+function mapStopReason(stopReason) {
+    if (!stopReason)
+        return 'stop';
+    const lower = stopReason.toLowerCase();
+    if (lower.includes('length') || lower.includes('max'))
+        return 'length';
+    if (lower.includes('filter') || lower.includes('content'))
+        return 'content_filter';
+    return 'stop';
+}
+function buildGrokMeta(result, extra) {
+    const meta = {
+        sessionId: extra?.sessionId ?? result.sessionId,
+        stopReason: extra?.stopReason ?? result.stopReason,
+        requestId: extra?.requestId ?? result.requestId,
+    };
+    if (!meta.sessionId && !meta.stopReason && !meta.requestId) {
+        return undefined;
+    }
+    return meta;
+}
+/**
+ * Build prompt from messages.
+ * Multi-turn: uses role + content only (DeepSeek-style: prior reasoning_content not required).
+ * If an assistant message only has reasoning_content, it is ignored unless content is empty
+ * and we fall back (should not normally happen).
+ */
+function messagesToPrompt(messages) {
+    if (messages.length === 1) {
+        return messages[0]?.content ?? '';
+    }
+    return messages
+        .map((m) => {
+        // Mainstream: only final answer content participates in context
+        return `${m.role}: ${m.content}`;
+    })
+        .join('\n');
+}
+//# sourceMappingURL=openai-mapper.js.map

package/dist/utils/openai-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-mapper.js","sourceRoot":"","sources":["../../src/utils/openai-mapper.ts"],"names":[],"mappings":";;AAiBA,0DAqDC;AAED,8CAmBC;AAMD,wDA0BC;AAED,oCAkBC;AAED,wCAwBC;AAED,sCAQC;AA+BD,4CAYC;AAtND,6BAA8C;AAS9C,SAAgB,uBAAuB,CACrC,KAAa,EACb,MAAsB,EACtB,UAAgC,EAAE;IAElC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAA,2BAAsB,GAAE,CAAC;IACtE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC;IAC5D,MAAM,SAAS,GACb,gBAAgB,IAAI,OAAO,CAAC,gBAAgB;QAC1C,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC1B,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,OAAO,GAAkD;QAC7D,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;KAC3B,CAAC;IAEF,IAAI,gBAAgB,IAAI,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACtC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,aAAa;IAC5C,CAAC;SAAM,IAAI,gBAAgB,EAAE,CAAC;QAC5B,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;QACjC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IACzB,CAAC;IAED,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAElF,MAAM,QAAQ,GAAyB;QACrC,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACtC,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,OAAO;gBACP,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,IAAI;aACf;SACF;QACD,KAAK,EAAE;YACL,aAAa,EAAE,CAAC;YAChB,iBAAiB,EAAE,CAAC;YACpB,YAAY,EAAE,CAAC;SAChB;KACF,CAAC;IAEF,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAa,EACb,OAAe,EACf,YAAoB,EACpB,OAAe;IAEf,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,EAAE,OAAO,EAAE;gBAClB,aAAa,EAAE,IAAI;aACpB;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CACpC,KAAa,EACb,gBAAwB,EACxB,YAAoB,EACpB,OAAe,EACf,gBAAgB,GAAG,IAAI;IAEvB,MAAM,KAAK,GAAqD;QAC9D,iBAAiB,EAAE,gBAAgB;KACpC,CAAC;IACF,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,CAAC,OAAO,GAAG,gBAAgB,CAAC;IACnC,CAAC;IACD,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK;gBACL,aAAa,EAAE,IAAI;aACpB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,YAAY,CAC1B,KAAa,EACb,YAAoB,EACpB,OAAe;IAEf,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;gBACzC,aAAa,EAAE,IAAI;aACpB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAC5B,KAAa,EACb,YAAoB,EACpB,OAAe,EACf,UAAmB,EACnB,IAAuB;IAEvB,MAAM,KAAK,GAA8B;QACvC,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,aAAa,CAAC,UAAU,CAAC;aACzC;SACF;KACF,CAAC;IACF,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,MAAgB;IAC5C,MAAM,IAAI,GAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,EAAE;QACF,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACtC,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,UAAmB;IACxC,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC;IAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CACpB,MAAsB,EACtB,KAAwB;IAExB,MAAM,IAAI,GAAqB;QAC7B,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS;QAC/C,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU;QAClD,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS;KAChD,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAC9B,QAAqF;IAErF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,gEAAgE;QAChE,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/utils/path-safe.d.ts

@@ -0,0 +1,4 @@
+export declare function resolveSafeCwd(input?: string | null): string;
+export declare function sanitizeFilename(name: string): string;
+export declare function ensureRelativeStoragePath(fileId: string): string;
+//# sourceMappingURL=path-safe.d.ts.map

package/dist/utils/path-safe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safe.d.ts","sourceRoot":"","sources":["../../src/utils/path-safe.ts"],"names":[],"mappings":"AAIA,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAe5D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAShE"}

package/dist/utils/path-safe.js

@@ -0,0 +1,37 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSafeCwd = resolveSafeCwd;
+exports.sanitizeFilename = sanitizeFilename;
+exports.ensureRelativeStoragePath = ensureRelativeStoragePath;
+const node_path_1 = __importDefault(require("node:path"));
+const env_1 = require("../config/env");
+const exception_factory_1 = require("../exceptions/exception.factory");
+function resolveSafeCwd(input) {
+    const candidate = node_path_1.default.resolve(input?.trim() || env_1.env.defaultCwd);
+    const allowed = env_1.env.cwdAllowlist.some((root) => {
+        const resolvedRoot = node_path_1.default.resolve(root);
+        return candidate === resolvedRoot || candidate.startsWith(resolvedRoot + node_path_1.default.sep);
+    });
+    if (!allowed) {
+        throw exception_factory_1.ExceptionFactory.invalidCwd(`cwd "${candidate}" is outside the allowlist: ${env_1.env.cwdAllowlist.join(', ')}`);
+    }
+    return candidate;
+}
+function sanitizeFilename(name) {
+    const base = node_path_1.default.basename(name).replace(/[^\w.\-()+ ]+/g, '_').slice(0, 200);
+    return base.length > 0 ? base : 'upload.bin';
+}
+function ensureRelativeStoragePath(fileId) {
+    if (!fileId || fileId.includes('..') || fileId.includes('/') || fileId.includes('\\')) {
+        throw exception_factory_1.ExceptionFactory.validation('Invalid storage path');
+    }
+    const safe = fileId.replace(/[^a-zA-Z0-9\-_]/g, '');
+    if (!safe || safe !== fileId) {
+        throw exception_factory_1.ExceptionFactory.validation('Invalid storage path');
+    }
+    return safe;
+}
+//# sourceMappingURL=path-safe.js.map

package/dist/utils/path-safe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safe.js","sourceRoot":"","sources":["../../src/utils/path-safe.ts"],"names":[],"mappings":";;;;;AAIA,wCAeC;AAED,4CAGC;AAED,8DASC;AAnCD,0DAA6B;AAC7B,uCAAoC;AACpC,uEAAmE;AAEnE,SAAgB,cAAc,CAAC,KAAqB;IAClD,MAAM,SAAS,GAAG,mBAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAG,CAAC,UAAU,CAAC,CAAC;IAEhE,MAAM,OAAO,GAAG,SAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7C,MAAM,YAAY,GAAG,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,SAAS,KAAK,YAAY,IAAI,SAAS,CAAC,UAAU,CAAC,YAAY,GAAG,mBAAI,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,oCAAgB,CAAC,UAAU,CAC/B,QAAQ,SAAS,+BAA+B,SAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,mBAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/C,CAAC;AAED,SAAgB,yBAAyB,CAAC,MAAc;IACtD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,oCAAgB,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,oCAAgB,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/stream.d.ts

@@ -0,0 +1,5 @@
+import type { Response } from 'express';
+export declare function initSse(res: Response): void;
+export declare function writeSseData(res: Response, data: unknown): void;
+export declare function writeSseDone(res: Response): void;
+//# sourceMappingURL=stream.d.ts.map

package/dist/utils/stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../src/utils/stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,wBAAgB,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAS3C;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAE/D;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAEhD"}

package/dist/utils/stream.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initSse = initSse;
+exports.writeSseData = writeSseData;
+exports.writeSseDone = writeSseDone;
+function initSse(res) {
+    res.status(200);
+    res.setHeader('Content-Type', 'text/event-stream; charset=utf-8');
+    res.setHeader('Cache-Control', 'no-cache, no-transform');
+    res.setHeader('Connection', 'keep-alive');
+    res.setHeader('X-Accel-Buffering', 'no');
+    if (typeof res.flushHeaders === 'function') {
+        res.flushHeaders();
+    }
+}
+function writeSseData(res, data) {
+    res.write(`data: ${JSON.stringify(data)}\n\n`);
+}
+function writeSseDone(res) {
+    res.write('data: [DONE]\n\n');
+}
+//# sourceMappingURL=stream.js.map

package/dist/utils/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/utils/stream.ts"],"names":[],"mappings":";;AAEA,0BASC;AAED,oCAEC;AAED,oCAEC;AAjBD,SAAgB,OAAO,CAAC,GAAa;IACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;IAClE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;IACzD,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC1C,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC3C,GAAG,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,GAAa,EAAE,IAAa;IACvD,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,YAAY,CAAC,GAAa;IACxC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAChC,CAAC"}

package/package.json

@@ -0,0 +1,87 @@
+{
+  "name": "grok-cli-to-openai-compatible",
+  "version": "1.2.0",
+  "description": "OpenAI-compatible API gateway for Grok CLI — with Admin panel, safe mode, and gctoac CLI",
+  "keywords": [
+    "grok",
+    "xai",
+    "openai",
+    "openai-compatible",
+    "cli",
+    "gateway",
+    "gctoac",
+    "gcoa"
+  ],
+  "homepage": "https://github.com/yanshekki/Grok-Cli-to-OpenAI-compatible",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/yanshekki/Grok-Cli-to-OpenAI-compatible.git"
+  },
+  "bugs": {
+    "url": "https://github.com/yanshekki/Grok-Cli-to-OpenAI-compatible/issues"
+  },
+  "license": "MIT",
+  "author": "yanshekki",
+  "main": "dist/server.js",
+  "bin": {
+    "gctoac": "dist/cli/index.js",
+    "gcoa": "dist/cli/index.js"
+  },
+  "files": [
+    "dist",
+    "prisma",
+    "public",
+    "README.md",
+    "LICENSE",
+    ".env.example"
+  ],
+  "scripts": {
+    "dev": "tsx watch src/server.ts",
+    "build": "tsc -p tsconfig.json && node -e \"require('fs').chmodSync('dist/cli/index.js',0o755)\"",
+    "start": "node dist/server.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "prisma:generate": "prisma generate",
+    "prisma:migrate": "mkdir -p data && prisma migrate dev",
+    "prisma:deploy": "mkdir -p data && prisma migrate deploy",
+    "db:setup": "mkdir -p data && prisma migrate deploy && tsx prisma/seed.ts",
+    "seed": "tsx prisma/seed.ts",
+    "smoke": "bash scripts/smoke.sh",
+    "postinstall": "prisma generate || true",
+    "prepublishOnly": "npm run build"
+  },
+  "prisma": {
+    "seed": "tsx prisma/seed.ts"
+  },
+  "dependencies": {
+    "@prisma/client": "^6.5.0",
+    "commander": "^13.1.0",
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.7",
+    "execa": "^8.0.1",
+    "express": "^4.21.2",
+    "express-rate-limit": "^7.5.0",
+    "helmet": "^8.0.0",
+    "multer": "^1.4.5-lts.1",
+    "pino": "^9.6.0",
+    "pino-http": "^10.4.0",
+    "prisma": "^6.5.0",
+    "zod": "^3.24.2"
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/multer": "^1.4.12",
+    "@types/node": "^22.13.10",
+    "@vitest/coverage-v8": "^3.0.9",
+    "pino-pretty": "^13.0.0",
+    "tsx": "^4.19.3",
+    "typescript": "^5.8.2",
+    "vitest": "^3.0.9"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/prisma/migrations/20260714084159_init_sqlite/migration.sql

@@ -0,0 +1,106 @@
+-- CreateTable
+CREATE TABLE "api_keys" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "keyPrefix" TEXT NOT NULL,
+    "keyHash" TEXT NOT NULL,
+    "role" TEXT NOT NULL DEFAULT 'client',
+    "isActive" BOOLEAN NOT NULL DEFAULT true,
+    "rateLimit" INTEGER NOT NULL DEFAULT 60,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "lastUsedAt" DATETIME
+);
+
+-- CreateTable
+CREATE TABLE "chat_requests" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "requestId" TEXT NOT NULL,
+    "apiKeyId" TEXT NOT NULL,
+    "model" TEXT NOT NULL,
+    "stream" BOOLEAN NOT NULL DEFAULT false,
+    "status" TEXT NOT NULL,
+    "durationMs" INTEGER,
+    "grokSessionId" TEXT,
+    "promptCiphertext" BLOB NOT NULL,
+    "promptIv" BLOB NOT NULL,
+    "promptTag" BLOB NOT NULL,
+    "responseCiphertext" BLOB,
+    "responseIv" BLOB,
+    "responseTag" BLOB,
+    "errorMessage" TEXT,
+    "ip" TEXT,
+    "userAgent" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "chat_requests_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "api_keys" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "documents" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT NOT NULL,
+    "originalName" TEXT NOT NULL,
+    "mimeType" TEXT NOT NULL,
+    "sizeBytes" INTEGER NOT NULL,
+    "storageType" TEXT NOT NULL,
+    "contentCiphertext" BLOB,
+    "contentIv" BLOB,
+    "contentTag" BLOB,
+    "storagePath" TEXT,
+    "checksumSha256" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "deletedAt" DATETIME,
+    CONSTRAINT "documents_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "api_keys" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "chat_request_documents" (
+    "chatRequestId" TEXT NOT NULL,
+    "documentId" TEXT NOT NULL,
+
+    PRIMARY KEY ("chatRequestId", "documentId"),
+    CONSTRAINT "chat_request_documents_chatRequestId_fkey" FOREIGN KEY ("chatRequestId") REFERENCES "chat_requests" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "chat_request_documents_documentId_fkey" FOREIGN KEY ("documentId") REFERENCES "documents" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "audit_logs" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "apiKeyId" TEXT,
+    "action" TEXT NOT NULL,
+    "resource" TEXT,
+    "resourceId" TEXT,
+    "metaJson" TEXT,
+    "ip" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "audit_logs_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "api_keys" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "api_keys_keyHash_key" ON "api_keys"("keyHash");
+
+-- CreateIndex
+CREATE INDEX "api_keys_keyPrefix_idx" ON "api_keys"("keyPrefix");
+
+-- CreateIndex
+CREATE INDEX "api_keys_isActive_idx" ON "api_keys"("isActive");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "chat_requests_requestId_key" ON "chat_requests"("requestId");
+
+-- CreateIndex
+CREATE INDEX "chat_requests_apiKeyId_createdAt_idx" ON "chat_requests"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "chat_requests_status_idx" ON "chat_requests"("status");
+
+-- CreateIndex
+CREATE INDEX "documents_apiKeyId_createdAt_idx" ON "documents"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "documents_deletedAt_idx" ON "documents"("deletedAt");
+
+-- CreateIndex
+CREATE INDEX "audit_logs_apiKeyId_createdAt_idx" ON "audit_logs"("apiKeyId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "audit_logs_action_createdAt_idx" ON "audit_logs"("action", "createdAt");

package/prisma/migrations/20260714090338_safe_mode_admin/migration.sql

@@ -0,0 +1,36 @@
+-- AlterTable
+ALTER TABLE "chat_requests" ADD COLUMN "policyMode" TEXT;
+
+-- CreateTable
+CREATE TABLE "settings" (
+    "key" TEXT NOT NULL PRIMARY KEY,
+    "value" TEXT NOT NULL,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_api_keys" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "keyPrefix" TEXT NOT NULL,
+    "keyHash" TEXT NOT NULL,
+    "role" TEXT NOT NULL DEFAULT 'client',
+    "mode" TEXT NOT NULL DEFAULT 'safe',
+    "isActive" BOOLEAN NOT NULL DEFAULT true,
+    "rateLimit" INTEGER NOT NULL DEFAULT 60,
+    "maxTurns" INTEGER,
+    "timeoutMs" INTEGER,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "lastUsedAt" DATETIME
+);
+INSERT INTO "new_api_keys" ("createdAt", "id", "isActive", "keyHash", "keyPrefix", "lastUsedAt", "name", "rateLimit", "role") SELECT "createdAt", "id", "isActive", "keyHash", "keyPrefix", "lastUsedAt", "name", "rateLimit", "role" FROM "api_keys";
+DROP TABLE "api_keys";
+ALTER TABLE "new_api_keys" RENAME TO "api_keys";
+CREATE UNIQUE INDEX "api_keys_keyHash_key" ON "api_keys"("keyHash");
+CREATE INDEX "api_keys_keyPrefix_idx" ON "api_keys"("keyPrefix");
+CREATE INDEX "api_keys_isActive_idx" ON "api_keys"("isActive");
+CREATE INDEX "api_keys_mode_idx" ON "api_keys"("mode");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "sqlite"