pennyrouter 0.1.16 → 0.1.17

package/README.md

@@ -31,6 +31,15 @@ login and configures PennyRouter as an OpenAI-authenticated Responses proxy. Cod
 to own and refresh the OpenAI credentials; PennyRouter stores only its existing `pr-` account
 key in the managed provider block. API-key Codex installs continue to use PennyRouter credits.
 
+To point Codex directly at a PennyRouter gateway running on localhost port 8400:
+
+```bash
+npx pennyrouter@latest install --harness codex --local
+```
+
+Restart Codex after installation. Without `--local`, browser authorization supplies the normal
+hosted gateway URL.
+
 ## Supported Tools
 
 - Claude Code
@@ -87,10 +96,16 @@ ant auth login
 npx pennyrouter auth anthropic
 ```
 
-The command updates Claude Code so `x-api-key` carries the PennyRouter key and
-`Authorization: Bearer ...` carries the Anthropic OAuth token. The gateway forwards that
-bearer token to Anthropic with the required OAuth beta header and does not deduct
-PennyRouter credit for those Anthropic-native upstream calls.
+The command stores the Anthropic token encrypted at the gateway. Claude Code keeps only the
+PennyRouter `pr-` bearer in its settings; the gateway retrieves and forwards the stored token
+with the required OAuth beta header and does not deduct PennyRouter credit for successfully
+served Anthropic-subscription calls.
+
+PennyRouter also sets `disableClaudeAiConnectors: true` while its custom gateway is installed.
+Claude Code cannot load claude.ai organization connectors when gateway authentication takes
+precedence, and otherwise displays a persistent warning about that state. Making the disablement
+explicit suppresses the warning; locally configured MCP servers are unaffected. Reinstall keeps
+the original user value, and disable or uninstall restores it unless the user changed it later.
 
 If the stored token expires during a long-running session, refresh the token source and rerun
 `npx pennyrouter auth anthropic`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pennyrouter",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "Install and manage PennyRouter local coding-agent integrations.",
   "homepage": "https://pennyrouter.com",
   "bugs": {
@@ -24,7 +24,7 @@
   ],
   "scripts": {
     "start": "node ./bin/pennyrouter.js",
-    "check": "node --check ./bin/pennyrouter.js && find src -name '*.js' -print0 | xargs -0 -n1 node --check && node src/statusline.test.js && node src/harnesses/codex.test.js"
+    "check": "node --check ./bin/pennyrouter.js && find src -name '*.js' -print0 | xargs -0 -n1 node --check && node src/statusline.test.js && node src/harnesses/claude-code.test.js && node src/harnesses/codex.test.js"
   },
   "license": "MIT"
 }

package/src/cli.js

@@ -192,10 +192,15 @@ async function authProvider(flags) {
   const gatewayBaseUrl = flags.gatewayBaseUrl || process.env.PENNYROUTER_GATEWAY_BASE_URL || "https://api.pennyrouter.com";
   // Store the token encrypted server-side, then write a pr-key-only config.
   await storeAnthropicToken({ gatewayBaseUrl, apiKey: pennyKey, token });
+  const manifest = await loadManifest();
+  const existingRecord = (manifest.installations || []).find(
+    (candidate) => candidate.harness === "claude-code",
+  );
   const plan = await claudeCodeHarness.planInstall();
-  const record = await claudeCodeHarness.installStoredToken({ apiKey: pennyKey, gatewayBaseUrl, plan });
+  const record = await claudeCodeHarness.installStoredToken({
+    apiKey: pennyKey, gatewayBaseUrl, plan, existingRecord,
+  });
 
-  const manifest = await loadManifest();
   upsertManifestRecord(manifest, {
     ...record,
     anthropic_oauth: true,
@@ -352,6 +357,9 @@ async function install(flags) {
     await runHarnessJob(failures, harness.id, "install", async () => {
       const plan = await harness.planInstall();
       const gatewayBaseUrl = flags.gatewayBaseUrl || claim.gateway_base_url;
+      const existingRecord = (manifest.installations || []).find(
+        (candidate) => candidate.harness === harness.id,
+      );
       let record;
       if (harness.id === "claude-code" && claudeAnthropicAuth) {
         // Store the Claude setup-token encrypted server-side, then write a config
@@ -362,7 +370,9 @@ async function install(flags) {
           apiKey: claim.api_key,
           token: claudeAnthropicAuth.token,
         });
-        record = await harness.installStoredToken({ apiKey: claim.api_key, gatewayBaseUrl, plan });
+        record = await harness.installStoredToken({
+          apiKey: claim.api_key, gatewayBaseUrl, plan, existingRecord,
+        });
         record.anthropic_oauth = true;
         record.anthropic_token_stored = true;
         record.token_source = claudeAnthropicAuth.source;
@@ -373,6 +383,7 @@ async function install(flags) {
           // (which points at prod) — so a --local install serves through the local gateway.
           gatewayBaseUrl,
           plan,
+          existingRecord,
         });
       }
       records.push(record);

package/src/harnesses/claude-code.js

@@ -3,6 +3,7 @@ import { configureClaudeCodeStatusline, restoreClaudeCodeStatusline } from "../s
 
 const CONFIG_PATH = "~/.claude/settings.json";
 const LEGACY_MODEL_LABEL = "PennyRouter Bundle";
+const CONNECTOR_SETTING = "disableClaudeAiConnectors";
 // Values written into Claude Code's four model slots. CC displays a slot's VALUE verbatim in
 // its /model menu AND sends it as the request `model`, so each value is both the menu label
 // and the gateway's routing key. The three concrete Claude slots carry friendly PINNED labels
@@ -41,9 +42,10 @@ export const claudeCodeHarness = {
     };
   },
 
-  async install({ apiKey, gatewayBaseUrl, plan }) {
+  async install({ apiKey, gatewayBaseUrl, plan, existingRecord }) {
     const backupPath = await backupFile(CONFIG_PATH, "claude-code");
     const current = (await readJsonFile(CONFIG_PATH, null)) || {};
+    const claudeAiConnectorsBefore = disableClaudeAiConnectors(current, existingRecord);
     current.env ||= {};
     current.env.ANTHROPIC_BASE_URL = gatewayBaseUrl;
     // Custom base URL: Claude Code authenticates with the auth token, not an
@@ -68,7 +70,9 @@ export const claudeCodeHarness = {
       installed_at: new Date().toISOString(),
       restart: "restart Claude Code",
       statusline: statusline.wrapped ? "wrapped-existing" : "installed",
+      claude_ai_connectors_before: claudeAiConnectorsBefore,
       changes: {
+        settings_keys: [CONNECTOR_SETTING],
         env_keys: [
           "ANTHROPIC_BASE_URL",
           "ANTHROPIC_AUTH_TOKEN",
@@ -83,12 +87,13 @@ export const claudeCodeHarness = {
 
   // Stored-token mode: the Anthropic setup-token was already POSTed to the gateway
   // and encrypted against the account (see cli.js storeAnthropicToken). Claude Code's
-  // config therefore carries ONLY the pr- key + base URL — no ANTHROPIC_AUTH_TOKEN.
-  // The gateway pulls the stored token per request. This avoids the plaintext token
-  // on disk AND the dual-credential (api key + auth token) warnings Claude Code emits.
-  async installStoredToken({ apiKey, gatewayBaseUrl, plan }) {
+  // config therefore carries only the pr- bearer + base URL, not the Anthropic token.
+  // The gateway pulls the stored token per request. This avoids putting the Anthropic
+  // credential on disk and avoids a dual-credential configuration.
+  async installStoredToken({ apiKey, gatewayBaseUrl, plan, existingRecord }) {
     const backupPath = await backupFile(CONFIG_PATH, "claude-code");
     const current = (await readJsonFile(CONFIG_PATH, null)) || {};
+    const claudeAiConnectorsBefore = disableClaudeAiConnectors(current, existingRecord);
     current.env ||= {};
     current.env.ANTHROPIC_BASE_URL = gatewayBaseUrl;
     current.env.ANTHROPIC_AUTH_TOKEN = apiKey;
@@ -110,7 +115,9 @@ export const claudeCodeHarness = {
       installed_at: new Date().toISOString(),
       restart: "restart Claude Code",
       statusline: statusline.wrapped ? "wrapped-existing" : "installed",
+      claude_ai_connectors_before: claudeAiConnectorsBefore,
       changes: {
+        settings_keys: [CONNECTOR_SETTING],
         env_keys: [
           "ANTHROPIC_BASE_URL",
           "ANTHROPIC_AUTH_TOKEN",
@@ -123,9 +130,10 @@ export const claudeCodeHarness = {
     };
   },
 
-  async installAnthropicOAuth({ pennyKey, anthropicAuthToken, gatewayBaseUrl }) {
+  async installAnthropicOAuth({ pennyKey, anthropicAuthToken, gatewayBaseUrl, existingRecord }) {
     const backupPath = await backupFile(CONFIG_PATH, "claude-code-anthropic-auth");
     const current = (await readJsonFile(CONFIG_PATH, null)) || {};
+    const claudeAiConnectorsBefore = disableClaudeAiConnectors(current, existingRecord);
     current.env ||= {};
     current.env.ANTHROPIC_BASE_URL = gatewayBaseUrl;
     // Dual-auth mode: x-api-key authenticates the local user to PennyRouter; the
@@ -147,7 +155,9 @@ export const claudeCodeHarness = {
       installed_at: new Date().toISOString(),
       restart: "restart Claude Code",
       statusline: statusline.wrapped ? "wrapped-existing" : "installed",
+      claude_ai_connectors_before: claudeAiConnectorsBefore,
       changes: {
+        settings_keys: [CONNECTOR_SETTING],
         env_keys: [
           "ANTHROPIC_BASE_URL",
           "ANTHROPIC_API_KEY",
@@ -191,6 +201,7 @@ export const claudeCodeHarness = {
         if (current.env[k] === LEGACY_MODEL_LABEL || isPennyRouterModelValue(current.env[k])) delete current.env[k];
       }
     }
+    restoreClaudeAiConnectors(current, record);
     if (current["anthropic.baseURL"] && isPennyRouterValue(current["anthropic.baseURL"])) {
       delete current["anthropic.baseURL"];
     }
@@ -204,6 +215,26 @@ export const claudeCodeHarness = {
   },
 };
 
+export function disableClaudeAiConnectors(settings, existingRecord = null) {
+  const saved = existingRecord?.claude_ai_connectors_before;
+  const before = saved && typeof saved.present === "boolean"
+    ? { ...saved }
+    : Object.prototype.hasOwnProperty.call(settings, CONNECTOR_SETTING)
+      ? { present: true, value: settings[CONNECTOR_SETTING] }
+      : { present: false };
+  settings[CONNECTOR_SETTING] = true;
+  return before;
+}
+
+export function restoreClaudeAiConnectors(settings, record) {
+  const before = record?.claude_ai_connectors_before;
+  if (!before || typeof before.present !== "boolean") return;
+  // Respect a user edit made after installation. We only undo the value we manage.
+  if (settings[CONNECTOR_SETTING] !== true) return;
+  if (before.present) settings[CONNECTOR_SETTING] = before.value;
+  else delete settings[CONNECTOR_SETTING];
+}
+
 function hasPennyRouterEnv(env) {
   if (!env || typeof env !== "object") return false;
   return (

package/src/harnesses/claude-code.test.js

@@ -0,0 +1,57 @@
+import assert from "node:assert/strict";
+
+import {
+  disableClaudeAiConnectors,
+  restoreClaudeAiConnectors,
+} from "./claude-code.js";
+
+function testAbsentSettingIsRemovedOnUninstall() {
+  const settings = {};
+  const before = disableClaudeAiConnectors(settings);
+
+  assert.equal(settings.disableClaudeAiConnectors, true);
+  assert.deepEqual(before, { present: false });
+
+  restoreClaudeAiConnectors(settings, { claude_ai_connectors_before: before });
+  assert.equal("disableClaudeAiConnectors" in settings, false);
+}
+
+function testExistingSettingIsRestored() {
+  const settings = { disableClaudeAiConnectors: false };
+  const before = disableClaudeAiConnectors(settings);
+
+  assert.equal(settings.disableClaudeAiConnectors, true);
+  assert.deepEqual(before, { present: true, value: false });
+
+  restoreClaudeAiConnectors(settings, { claude_ai_connectors_before: before });
+  assert.equal(settings.disableClaudeAiConnectors, false);
+}
+
+function testReinstallKeepsOriginalValue() {
+  const settings = {};
+  const firstBefore = disableClaudeAiConnectors(settings);
+  const secondBefore = disableClaudeAiConnectors(settings, {
+    claude_ai_connectors_before: firstBefore,
+  });
+
+  assert.deepEqual(secondBefore, { present: false });
+  restoreClaudeAiConnectors(settings, {
+    claude_ai_connectors_before: secondBefore,
+  });
+  assert.equal("disableClaudeAiConnectors" in settings, false);
+}
+
+function testUninstallPreservesLaterUserEdit() {
+  const settings = {};
+  const before = disableClaudeAiConnectors(settings);
+  settings.disableClaudeAiConnectors = false;
+
+  restoreClaudeAiConnectors(settings, { claude_ai_connectors_before: before });
+  assert.equal(settings.disableClaudeAiConnectors, false);
+}
+
+testAbsentSettingIsRemovedOnUninstall();
+testExistingSettingIsRestored();
+testReinstallKeepsOriginalValue();
+testUninstallPreservesLaterUserEdit();
+console.log("claude-code.test.js: all checks passed");