llmpt 1.1.0

package/CHANGELOG.md

@@ -0,0 +1,32 @@
+# Changelog
+
+## v1.1.0 (2026-06-15)
+
+### 新增
+
+- **Thinking 内联展示**：响应区域的 Thinking 内容不再独立成一个顶层 Section，改为嵌在 Response Section 内部顶部，以折叠块形式展示（默认收起），与 messages 历史中的 ThinkingBlock 风格一致
+- **Thinking Markdown 渲染**：Thinking 折叠块展开后支持「原文 / 渲染」切换，渲染模式走 react-markdown，修复了因父容器 `.content-block` 的 `white-space: pre-wrap` 继承导致空行堆积的问题
+- **Thinking 复制按钮**：hover 到 Thinking 标题行时出现复制按钮，固定在行尾右侧
+- **自定义 ConfirmDialog**：替换浏览器原生 `window.confirm`，所有删除确认操作改为居中精美弹窗，支持 Esc 取消、Enter 确认、毛玻璃遮罩、弹出动画
+
+### 优化
+
+- Thinking 标题行三角符号与文字间距加宽
+- Thinking 展开时 toggle 按钮（原文/渲染）与标题同行，不再另起一行
+- 去掉 Thinking 标题行的行数统计（`N 行`）信息，界面更简洁
+
+---
+
+## v1.0.0 (2026-06-14)
+
+初始发布。
+
+- 单进程单端口代理服务（默认 19900）
+- 支持 OpenAI / Anthropic / Ollama 三类 Provider
+- 实时 WebSocket 推送，Trace 列表自动更新
+- Trace 详情：System Prompt、Messages、Response、Tool Calls、Raw JSON
+- Markdown 渲染（react-markdown + highlight.js 代码高亮）
+- Token 用量栏（prompt / completion / reasoning / cache）
+- 深色 / 浅色主题切换
+- Trace JSONL 持久化，重启可恢复历史
+- AES-256-GCM API Key 加密存储

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 zhxsking
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,130 @@
+# LPT — LLM Proxy Trace
+
+> 本地 LLM 代理工具，零侵入地拦截并可视化所有 OpenAI / Anthropic / Ollama API 调用
+
+```
+你的应用  ──►  http://localhost:19900  ──►  真实 LLM Provider
+                        │
+                        ▼
+             Web Dashboard（实时 Trace 监控）
+```
+
+---
+
+## 功能特性
+
+- **零侵入代理** — 只需把 `base_url` 改为 `http://localhost:19900`，无需修改任何应用代码
+- **实时流式追踪** — WebSocket 推送，实时响应
+- **完整 Trace 记录** — 请求体、响应体、思考链（thinking）、Tool Call、Token 用量全记录
+- **Markdown 渲染** — 响应内容支持原文 / Markdown 双视图，代码块语法高亮
+- **Token 用量统计** — 输入/输出/推理/缓存命中 Token 分项展示，实时速度统计
+
+---
+
+## 快速开始
+
+### 方式一：npx 一键启动（推荐）
+
+无需安装，直接运行：
+
+```bash
+npx llmpt
+```
+
+首次运行会在当前目录生成 `lpt.config.yaml` 配置文件，按提示填入 API Key 后即可使用。
+
+### 方式二：全局安装
+
+```bash
+npm install -g llmpt
+llmpt
+```
+
+### 方式三：从源码运行
+
+```bash
+git clone https://github.com/zhxsking/llm_proxy_trace.git
+cd llm_proxy_trace
+npm install
+npm run build
+npm start
+```
+
+启动后浏览器打开 `http://localhost:19900`。
+
+---
+
+## 配置
+
+启动后编辑当前目录的 `lpt.config.yaml`：
+
+```yaml
+proxy:
+  port: 19900          # 代理端口
+
+providers:
+  openai:
+    apiKey: "sk-..."   # OpenAI API Key
+    baseUrl: "https://api.openai.com"
+
+  anthropic:
+    apiKey: "sk-ant-..." # Anthropic API Key
+
+  ollama:
+    baseUrl: "http://localhost:11434"
+```
+
+修改配置后重启服务生效。
+
+---
+
+## 接入客户端
+
+将 LLM SDK 的 `base_url` 指向本地代理，其余配置保持不变：
+
+**Python（OpenAI SDK）**
+```python
+from openai import OpenAI
+client = OpenAI(
+    base_url="http://localhost:19900/v1",
+    api_key="any",   # 代理会替换为配置文件中的真实 key
+)
+```
+
+**环境变量（适用于大多数客户端）**
+```bash
+OPENAI_BASE_URL=http://localhost:19900/v1
+OPENAI_API_KEY=any
+
+# Anthropic
+ANTHROPIC_BASE_URL=http://localhost:19900
+```
+
+---
+
+## 技术栈
+
+| 层 | 技术 |
+|----|------|
+| 运行时 | Node.js 18+ |
+| 语言 | TypeScript 5.x |
+| 后端框架 | [Hono](https://hono.dev) |
+| 前端框架 | React 18 + Vite 6 |
+| 样式 | CSS Variables + Tailwind CSS |
+| 字体 | 系统默认字体栈 |
+| 实时通信 | WebSocket (`ws`) |
+| Markdown | react-markdown + remark-gfm + highlight.js |
+| 配置 | js-yaml |
+| 加密 | Node.js crypto（AES-256-GCM） |
+
+---
+
+## 致谢
+
+界面设计和 Trace 展示风格参考了 [claude-tap](https://github.com/liaohch3/claude-tap) 项目。
+
+---
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,71 @@
+#!/usr/bin/env node
+// ============================================================
+// LPT CLI Entry Point - Unified server (proxy + dashboard + WS)
+// ============================================================
+import { createApp } from './server/app.js';
+import { loadConfig } from './server/config/loader.js';
+import path from 'node:path';
+async function main() {
+    console.log('🚀 LPT (LLM Proxy Trace) 启动中...');
+    // Load configuration — pass explicit path so saveConfig writes back to the same file
+    const configPath = path.resolve(process.cwd(), 'lpt.config.yaml');
+    const config = loadConfig(configPath);
+    console.log(`📋 配置加载成功：端口 ${config.proxy.port}`);
+    // Create application
+    const { app, registry, collector, ws } = createApp(config, configPath);
+    // Create HTTP server with Hono handler
+    const { serve } = await import('@hono/node-server');
+    const server = serve({
+        fetch: app.fetch,
+        port: config.proxy.port,
+    });
+    // Attach WebSocket to the same HTTP server
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    ws.attachToServer(server, '/ws');
+    console.log(`\n🌐 服务运行中：http://localhost:${config.proxy.port}`);
+    console.log(`🔌 WebSocket：ws://localhost:${config.proxy.port}/ws`);
+    console.log(`📁 Trace 目录：${config.trace.dir}`);
+    console.log('\n  代理路由：');
+    console.log('    POST /v1/chat/completions  (OpenAI)');
+    console.log('    POST /v1/completions       (OpenAI)');
+    console.log('    GET  /v1/models');
+    console.log('    POST /v1/messages          (Anthropic)');
+    console.log('    POST /api/chat             (Ollama)');
+    console.log('  管理 API：');
+    console.log('    GET  /api/traces');
+    console.log('    GET  /api/traces/:id');
+    console.log('    GET  /api/providers');
+    console.log('    PUT  /api/providers/:type');
+    console.log('    GET  /api/stats');
+    console.log('\n  ⌨️  Ctrl+C 停止\n');
+    // Auto-open dashboard
+    if (config.dashboard.autoOpen) {
+        const url = `http://localhost:${config.proxy.port}`;
+        setTimeout(async () => {
+            try {
+                const { exec } = await import('node:child_process');
+                const cmd = process.platform === 'win32' ? `start ${url}` :
+                    process.platform === 'darwin' ? `open ${url}` :
+                        `xdg-open ${url}`;
+                exec(cmd);
+            }
+            catch { /* ignore */ }
+        }, 1500);
+    }
+    // Graceful shutdown
+    const shutdown = () => {
+        console.log('\n🛑 正在关闭服务...');
+        registry.stopRefreshTimers();
+        ws.stop();
+        server.close();
+        console.log('👋 已退出');
+        process.exit(0);
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+}
+main().catch((err) => {
+    console.error('启动失败:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,+DAA+D;AAC/D,gEAAgE;AAChE,+DAA+D;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAE/C,qFAAqF;IACrF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAEjD,qBAAqB;IACrB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEvE,uCAAuC;IACvC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;KACxB,CAAC,CAAC;IAEH,2CAA2C;IAC3C,8DAA8D;IAC9D,EAAE,CAAC,cAAc,CAAC,MAAa,EAAE,KAAK,CAAC,CAAC;IAExC,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAEnC,sBAAsB;IACtB,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,oBAAoB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACpD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;oBAChD,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC;wBAC/C,YAAY,GAAG,EAAE,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC7B,EAAE,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server/api/routes.d.ts

@@ -0,0 +1,6 @@
+import { Hono } from 'hono';
+import type { TraceCollector } from '../trace/collector.js';
+import type { ProviderRegistry } from '../providers/registry.js';
+import type { AppConfig } from '../types.js';
+export declare function createApiRoutes(collector: TraceCollector, registry: ProviderRegistry, config: AppConfig, configPath?: string): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/dist/server/api/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/server/api/routes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAgC,MAAM,aAAa,CAAC;AAI3E,wBAAgB,eAAe,CAC7B,SAAS,EAAE,cAAc,EACzB,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,SAAS,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI,CA0IN"}

package/dist/server/api/routes.js

@@ -0,0 +1,128 @@
+// ============================================================
+// Management API Routes
+// ============================================================
+import { Hono } from 'hono';
+import path from 'node:path';
+import { maskApiKey } from '../config/crypto.js';
+import { saveConfig } from '../config/loader.js';
+export function createApiRoutes(collector, registry, config, configPath) {
+    const api = new Hono();
+    // --- Trace APIs ---
+    api.get('/traces', (c) => {
+        const model = c.req.query('model');
+        const provider = c.req.query('provider');
+        const status = c.req.query('status');
+        const keyword = c.req.query('keyword');
+        const limit = parseInt(c.req.query('limit') || '50');
+        const offset = parseInt(c.req.query('offset') || '0');
+        const result = collector.search({ model, provider, status, keyword, limit, offset });
+        return c.json({
+            traces: result.traces,
+            total: result.total,
+            page: Math.floor(offset / limit) + 1,
+            pageSize: limit,
+        });
+    });
+    // POST /api/traces/reload → 静态路由必须在 /:id 动态路由之前
+    api.post('/traces/reload', (c) => {
+        const count = collector.loadFromDisk();
+        return c.json({ ok: true, loaded: count });
+    });
+    // GET /api/traces/files → 获取所有 JSONL 文件名列表
+    api.get('/traces/files', (c) => {
+        const files = collector.getWriter().getTraceFiles().map(f => path.basename(f));
+        return c.json({ files });
+    });
+    // DELETE /api/traces/file/:name → 删除指定文件及其内存记录
+    api.delete('/traces/file/:name', (c) => {
+        const name = c.req.param('name');
+        const ok = collector.deleteFile(name);
+        return c.json({ ok });
+    });
+    api.get('/traces/:id', (c) => {
+        const id = c.req.param('id');
+        const trace = collector.get(id);
+        if (!trace)
+            return c.json({ error: 'Trace not found' }, 404);
+        return c.json(trace);
+    });
+    api.delete('/traces', (c) => {
+        const permanent = c.req.query('files') === 'true';
+        collector.clear();
+        if (permanent) {
+            collector.getWriter().deleteAllFiles();
+        }
+        return c.json({ ok: true, permanent });
+    });
+    // --- Provider APIs ---
+    // GET /api/providers → 返回当前已配置的 provider 列表
+    api.get('/providers', (c) => {
+        const providers = registry.getAll().map((p) => ({
+            type: p.type,
+            baseUrl: p.config.baseUrl,
+            apiKey: p.config.apiKey ? maskApiKey(p.config.apiKey) : undefined,
+        }));
+        return c.json(providers);
+    });
+    // PUT /api/providers/:type → 更新某个 type 的配置
+    api.put('/providers/:type', async (c) => {
+        const type = c.req.param('type');
+        if (!['openai', 'anthropic', 'ollama'].includes(type)) {
+            return c.json({ error: 'Invalid provider type' }, 400);
+        }
+        const body = await c.req.json();
+        const existing = config.providers[type] || {};
+        const updated = {
+            baseUrl: body.baseUrl ?? existing.baseUrl ?? '',
+            apiKey: body.apiKey ?? existing.apiKey,
+            headers: body.headers ?? existing.headers,
+        };
+        config.providers[type] = updated;
+        registry.registerAll(config.providers);
+        saveConfig(config, configPath);
+        return c.json({ ok: true });
+    });
+    // DELETE /api/providers/:type → 移除某个 type
+    api.delete('/providers/:type', (c) => {
+        const type = c.req.param('type');
+        delete config.providers[type];
+        registry.registerAll(config.providers);
+        saveConfig(config, configPath);
+        return c.json({ ok: true });
+    });
+    // --- Config APIs ---
+    api.get('/config', (c) => {
+        return c.json({
+            proxy: config.proxy,
+            trace: { dir: config.trace.dir, maxFileSize: config.trace.maxFileSize },
+            dashboard: config.dashboard,
+            providerCount: Object.keys(config.providers).length,
+        });
+    });
+    // --- Stats APIs ---
+    api.get('/stats', (c) => {
+        const allTraces = collector.getAll();
+        const completed = allTraces.filter((t) => t.status === 'completed');
+        const totalCalls = allTraces.length;
+        const totalTokens = completed.reduce((sum, t) => sum + (t.usage?.totalTokens || 0), 0);
+        const avgDuration = completed.length > 0
+            ? completed.reduce((sum, t) => sum + t.duration, 0) / completed.length
+            : 0;
+        const callsByModel = {};
+        const callsByProvider = {};
+        for (const t of allTraces) {
+            callsByModel[t.model] = (callsByModel[t.model] || 0) + 1;
+            callsByProvider[t.provider] = (callsByProvider[t.provider] || 0) + 1;
+        }
+        return c.json({
+            totalCalls,
+            totalTokens,
+            avgDuration: Math.round(avgDuration),
+            callsByModel,
+            callsByProvider,
+            recentCalls: allTraces.slice(0, 10),
+        });
+    });
+    return api;
+}
+//# sourceMappingURL=routes.js.map

package/dist/server/api/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/server/api/routes.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wBAAwB;AACxB,+DAA+D;AAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,MAAM,UAAU,eAAe,CAC7B,SAAyB,EACzB,QAA0B,EAC1B,MAAiB,EACjB,UAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,qBAAqB;IAErB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAgE,CAAC;QACpG,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC;YACpC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;QACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;QAClD,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,wBAAwB;IAExB,4CAA4C;IAC5C,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;YACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAiB,CAAC;QACjD,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAA2B,CAAC;QACzD,MAAM,QAAQ,GAA4B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,OAAO,GAAmB;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE;YAC/C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;YACtC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;SAC1C,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QACjC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAiB,CAAC;QACjD,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,sBAAsB;IAEtB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;YACvE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qBAAqB;IAErB,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;QAEpE,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC;QACpC,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM;YACtE,CAAC,CAAC,CAAC,CAAC;QAEN,MAAM,YAAY,GAA2B,EAAE,CAAC;QAChD,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACzD,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,UAAU;YACV,WAAW;YACX,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YACpC,YAAY;YACZ,eAAe;YACf,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/app.d.ts

@@ -0,0 +1,14 @@
+import { Hono } from 'hono';
+import type { AppConfig } from './types.js';
+import { ProviderRegistry } from './providers/registry.js';
+import { TraceCollector } from './trace/collector.js';
+import { WSServer } from './ws/server.js';
+export interface AppContext {
+    app: Hono;
+    registry: ProviderRegistry;
+    collector: TraceCollector;
+    ws: WSServer;
+    config: AppConfig;
+}
+export declare function createApp(config: AppConfig, configPath?: string): AppContext;
+//# sourceMappingURL=app.d.ts.map

package/dist/server/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAK1C,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,IAAI,CAAC;IACV,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,cAAc,CAAC;IAC1B,EAAE,EAAE,QAAQ,CAAC;IACb,MAAM,EAAE,SAAS,CAAC;CACnB;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,UAAU,CA2E5E"}

package/dist/server/app.js

@@ -0,0 +1,75 @@
+// ============================================================
+// Hono App - 主应用入口
+// ============================================================
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import path from 'node:path';
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { ProviderRegistry } from './providers/registry.js';
+import { TraceCollector } from './trace/collector.js';
+import { WSServer } from './ws/server.js';
+import { handleProxy } from './proxy/handler.js';
+import { createApiRoutes } from './api/routes.js';
+import { serveStaticFiles } from './static.js';
+export function createApp(config, configPath) {
+    const app = new Hono();
+    // Initialize services
+    const registry = new ProviderRegistry();
+    const collector = new TraceCollector(config.trace.dir, config.trace.maxFileSize, config.trace.maxInMemory);
+    const ws = new WSServer();
+    // Register providers from config
+    registry.registerAll(config.providers);
+    // Wire up WebSocket callbacks for trace events
+    collector.setCallbacks((trace) => ws.broadcast({ type: 'trace:new', data: trace }), (update) => ws.broadcast({ type: 'trace:update', data: update }));
+    // Middleware
+    // Security: restrict CORS to localhost origins only.
+    // This prevents any web page from a remote origin from reading traces or
+    // calling management APIs (which could expose LLM conversation contents).
+    app.use('*', cors({
+        origin: (origin) => {
+            if (!origin)
+                return origin; // same-origin / non-browser requests
+            try {
+                const url = new URL(origin);
+                const host = url.hostname;
+                if (host === 'localhost' || host === '127.0.0.1' || host === '::1')
+                    return origin;
+            }
+            catch { /* ignore malformed origin */ }
+            return null; // reject everything else
+        },
+        allowMethods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
+        allowHeaders: ['Content-Type', 'Authorization', 'x-api-key'],
+    }));
+    // --- Management API (MUST be before proxy catch-all) ---
+    const apiRoutes = createApiRoutes(collector, registry, config, configPath);
+    app.route('/api', apiRoutes);
+    // --- Health check ---
+    app.get('/health', (c) => c.json({ status: 'ok', proxy: true }));
+    // --- Proxy Routes ---
+    // Models endpoint（返回空列表，不再远程拉取）
+    app.get('/v1/models', (c) => c.json({ object: 'list', data: [] }));
+    app.get('/models', (c) => c.json({ object: 'list', data: [] }));
+    app.get('/api/tags', (c) => c.json({ models: [] }));
+    // OpenAI-compatible completions
+    app.post('/v1/chat/completions', async (c) => handleProxy(c, registry, collector, ws));
+    app.post('/chat/completions', async (c) => handleProxy(c, registry, collector, ws));
+    app.post('/v1/completions', async (c) => handleProxy(c, registry, collector, ws));
+    app.post('/completions', async (c) => handleProxy(c, registry, collector, ws));
+    // Anthropic-compatible
+    app.post('/v1/messages', async (c) => handleProxy(c, registry, collector, ws));
+    // Ollama-compatible
+    app.post('/api/chat', async (c) => handleProxy(c, registry, collector, ws));
+    app.post('/api/generate', async (c) => handleProxy(c, registry, collector, ws));
+    // Catch-all for any remaining /v1/* paths (except /api/* management routes)
+    app.all('/v1/*', async (c) => handleProxy(c, registry, collector, ws));
+    // --- Static file serving for frontend (SPA) ---
+    // Check for dist/web directory (built frontend)
+    const webDist = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../../dist/web');
+    if (fs.existsSync(webDist)) {
+        app.use('*', serveStaticFiles(webDist));
+    }
+    return { app, registry, collector, ws, config };
+}
+//# sourceMappingURL=app.js.map

package/dist/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,mBAAmB;AACnB,+DAA+D;AAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAU/C,MAAM,UAAU,SAAS,CAAC,MAAiB,EAAE,UAAmB;IAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,sBAAsB;IACtB,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,cAAc,CAClC,MAAM,CAAC,KAAK,CAAC,GAAG,EAChB,MAAM,CAAC,KAAK,CAAC,WAAW,EACxB,MAAM,CAAC,KAAK,CAAC,WAAW,CACzB,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;IAE1B,iCAAiC;IACjC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEvC,+CAA+C;IAC/C,SAAS,CAAC,YAAY,CACpB,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAC3D,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CACjE,CAAC;IAEF,aAAa;IACb,qDAAqD;IACrD,yEAAyE;IACzE,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;QAChB,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YACjB,IAAI,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC,CAAC,qCAAqC;YACjE,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;gBAC1B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK;oBAAE,OAAO,MAAM,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC,CAAC,yBAAyB;QACxC,CAAC;QACD,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;QACzD,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC;KAC7D,CAAC,CAAC,CAAC;IAEJ,0DAA0D;IAC1D,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3E,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAE7B,uBAAuB;IACvB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEjE,uBAAuB;IACvB,gCAAgC;IAChC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,gCAAgC;IAChC,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACvF,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACpF,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAE/E,uBAAuB;IACvB,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAE/E,oBAAoB;IACpB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5E,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAEhF,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAEvE,iDAAiD;IACjD,gDAAgD;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC7F,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC"}

package/dist/server/config/crypto.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Encrypt a plaintext string → base64 encoded ciphertext
+ * Format: base64(iv[16] + authTag[16] + ciphertext)
+ */
+export declare function encrypt(plaintext: string): string;
+/**
+ * Decrypt a base64 encoded ciphertext → plaintext string
+ */
+export declare function decrypt(ciphertext: string): string;
+/**
+ * Mask an API key for display: sk-1234...abcd
+ */
+export declare function maskApiKey(key: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/server/config/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../src/server/config/crypto.ts"],"names":[],"mappings":"AA2BA;;;GAGG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAYjD;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAgBlD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG9C"}

package/dist/server/config/crypto.js

@@ -0,0 +1,63 @@
+// ============================================================
+// API Key Encryption / Decryption (AES-256-GCM)
+// ============================================================
+import crypto from 'node:crypto';
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 16;
+const TAG_LENGTH = 16;
+// Fixed salt — unique to this application, provides domain separation.
+// Key also incorporates machine identity so ciphertext is not portable
+// between machines (reduces risk if config file is leaked).
+const APP_SALT = 'lpt-proxy-trace-v1';
+/**
+ * Derive a 32-byte key using HKDF from machine identity.
+ * Even if hostname/username both fall back to defaults, the fixed
+ * APP_SALT ensures the key is domain-separated from other apps.
+ */
+function deriveKey() {
+    const hostname = process.env.COMPUTERNAME || process.env.HOSTNAME || 'localhost';
+    const username = process.env.USERNAME || process.env.USER || 'default';
+    const ikm = Buffer.from(`${hostname}:${username}`, 'utf-8');
+    // HKDF-SHA256: info = app salt, length = 32 bytes
+    return crypto.hkdfSync('sha256', ikm, Buffer.alloc(0), APP_SALT, 32);
+}
+/**
+ * Encrypt a plaintext string → base64 encoded ciphertext
+ * Format: base64(iv[16] + authTag[16] + ciphertext)
+ */
+export function encrypt(plaintext) {
+    const key = deriveKey();
+    const iv = crypto.randomBytes(IV_LENGTH);
+    const cipher = crypto.createCipheriv(ALGORITHM, key, iv);
+    const encrypted = Buffer.concat([
+        cipher.update(plaintext, 'utf-8'),
+        cipher.final(),
+    ]);
+    const tag = cipher.getAuthTag();
+    return Buffer.concat([iv, tag, encrypted]).toString('base64');
+}
+/**
+ * Decrypt a base64 encoded ciphertext → plaintext string
+ */
+export function decrypt(ciphertext) {
+    const key = deriveKey();
+    const combined = Buffer.from(ciphertext, 'base64');
+    if (combined.length < IV_LENGTH + TAG_LENGTH) {
+        throw new Error('Invalid ciphertext: too short');
+    }
+    const iv = combined.subarray(0, IV_LENGTH);
+    const tag = combined.subarray(IV_LENGTH, IV_LENGTH + TAG_LENGTH);
+    const encrypted = combined.subarray(IV_LENGTH + TAG_LENGTH);
+    const decipher = crypto.createDecipheriv(ALGORITHM, key, iv);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(encrypted), decipher.final()]).toString('utf-8');
+}
+/**
+ * Mask an API key for display: sk-1234...abcd
+ */
+export function maskApiKey(key) {
+    if (!key || key.length <= 8)
+        return '***';
+    return `${key.slice(0, 4)}...${key.slice(-4)}`;
+}
+//# sourceMappingURL=crypto.js.map

package/dist/server/config/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../src/server/config/crypto.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,gDAAgD;AAChD,+DAA+D;AAE/D,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,uEAAuE;AACvE,uEAAuE;AACvE,4DAA4D;AAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAEtC;;;;GAIG;AACH,SAAS,SAAS;IAChB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;IACvE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5D,kDAAkD;IAClD,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAsB,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB;IACvC,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;QACjC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,UAAkB;IACxC,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEnD,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,GAAU,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,GAAG,GAAS,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC"}

package/dist/server/config/loader.d.ts

@@ -0,0 +1,12 @@
+import type { AppConfig } from '../types.js';
+declare const DEFAULT_CONFIG: AppConfig;
+/**
+ * Load config from YAML file, falling back to defaults
+ */
+export declare function loadConfig(configPath?: string): AppConfig;
+/**
+ * Save config back to YAML file (encrypts API keys)
+ */
+export declare function saveConfig(config: AppConfig, configPath?: string): void;
+export { DEFAULT_CONFIG };
+//# sourceMappingURL=loader.d.ts.map

package/dist/server/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/server/config/loader.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAmC,MAAM,aAAa,CAAC;AA4C9E,QAAA,MAAM,cAAc,EAAE,SAerB,CAAC;AAEF;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAkCzD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAevE;AAmBD,OAAO,EAAE,cAAc,EAAE,CAAC"}