pennyrouter 0.3.18 → 0.3.19

package/README.md

@@ -29,7 +29,7 @@ Installing against a self-hosted gateway is its own flow, with no browser login:
 keeps its own accounts, so the key is minted there.
 
 ```bash
-npx pennyrouter install --private-gateway https://gateway.example.internal
+npx pennyrouter install --private-gateway https://penny-router.apps-dev.gtri.org
 ```
 
 It asks for the gateway URL (unless given) and your email, and mints a key against that
@@ -44,11 +44,11 @@ ones:
 ```json
 {
   "harnesses": ["claude-code", "codex"],
-  "gatewayBaseUrl": "https://gateway.example.internal",
+  "gatewayBaseUrl": "https://penny-router.apps-dev.gtri.org",
   "claudeFunding": ["anthropic-proxy"],
-  "proxyBaseUrl": "https://litellm.example.internal",
+  "anthropicProxyBaseUrl": "https://litellm.core.gtri.org/v1",
   "codexFunding": ["openai-proxy"],
-  "openaiProxyBaseUrl": "https://litellm.example.internal"
+  "openaiProxyBaseUrl": "https://litellm.core.gtri.org/v1"
 }
 ```
 
@@ -57,6 +57,13 @@ npx pennyrouter install --config team-install.json
 ```
 
 Each person is prompted for their email and their proxy key; everything else is prefilled.
+
+For clarity, `proxyBaseUrl`/`proxyApiKey` are the legacy names for the Claude/Anthropic
+wire lane. New files should use `anthropicProxyBaseUrl`/`anthropicProxyApiKey`; Codex uses
+`openaiProxyBaseUrl`/`openaiProxyApiKey`. The `--private-server` spelling is a compatibility
+alias for `--private-gateway`.
+
+
 Any field left out of the file is prompted for, and an unattended run that cannot prompt
 refuses by name rather than installing a half-configured harness. Add `email`, `proxyApiKey`
 and `openaiProxyApiKey` to the file to skip the prompts entirely.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pennyrouter",
-  "version": "0.3.18",
+  "version": "0.3.19",
   "description": "Install and manage PennyRouter local coding-agent integrations.",
   "homepage": "https://pennyrouter.com",
   "bugs": {

package/src/cli.js

@@ -234,6 +234,10 @@ function parseArgs(argv) {
     else if (arg.startsWith("--openai-proxy-base-url=")) flags.openaiProxyBaseUrl = arg.slice("--openai-proxy-base-url=".length);
     else if (arg === "--openai-proxy-api-key") flags.openaiProxyApiKey = rest[++i] || "";
     else if (arg.startsWith("--openai-proxy-api-key=")) flags.openaiProxyApiKey = arg.slice("--openai-proxy-api-key=".length);
+    else if (arg === "--anthropic-proxy-base-url") flags.proxyBaseUrl = rest[++i] || "";
+    else if (arg.startsWith("--anthropic-proxy-base-url=")) flags.proxyBaseUrl = arg.slice("--anthropic-proxy-base-url=".length);
+    else if (arg === "--anthropic-proxy-api-key") flags.proxyApiKey = rest[++i] || "";
+    else if (arg.startsWith("--anthropic-proxy-api-key=")) flags.proxyApiKey = arg.slice("--anthropic-proxy-api-key=".length);
     else if (arg === "--proxy-base-url") flags.proxyBaseUrl = rest[++i] || "";
     else if (arg.startsWith("--proxy-base-url=")) flags.proxyBaseUrl = arg.slice("--proxy-base-url=".length);
     else if (arg === "--proxy-api-key") flags.proxyApiKey = rest[++i] || "";
@@ -250,17 +254,17 @@ function parseArgs(argv) {
     // --gateway-base-url, which expects the URL and an admin-issued key up front, this asks
     // for what it needs (gateway URL, then email) and mints the key from the gateway itself,
     // so a user on a VPN can install without an administrator handing them a key first.
-    else if (arg === "--private-gateway") {
+    else if (arg === "--private-gateway" || arg === "--private-server") {
       flags.privateGatewayFlow = true;
       flags.privateGateway = true;
       // Optional inline URL: `--private-gateway https://...` rather than a prompt. Only
       // consume the next argument when it is not itself a flag.
       if (rest[i + 1] && !rest[i + 1].startsWith("-")) flags.gatewayBaseUrl = rest[++i];
     }
-    else if (arg.startsWith("--private-gateway=")) {
+    else if (arg.startsWith("--private-gateway=") || arg.startsWith("--private-server=")) {
       flags.privateGatewayFlow = true;
       flags.privateGateway = true;
-      flags.gatewayBaseUrl = arg.slice("--private-gateway=".length);
+      flags.gatewayBaseUrl = arg.slice(arg.indexOf("=") + 1);
     }
     // Email the private gateway mints the key against; prompted for when absent.
     else if (arg === "--email") flags.email = rest[++i] || "";
@@ -328,6 +332,15 @@ export function applyConfigFile(flags) {
   if (config.harnesses && flags.harness === undefined) {
     flags.harness = config.harnesses.join(",");
   }
+  // Migrate the ambiguous Claude proxy keys in-memory. Existing shared install files remain
+  // valid while new files can say explicitly which wire lane they configure.
+  if (config.anthropicProxyBaseUrl === undefined && config.proxyBaseUrl !== undefined) {
+    config.anthropicProxyBaseUrl = config.proxyBaseUrl;
+  }
+  if (config.anthropicProxyApiKey === undefined && config.proxyApiKey !== undefined) {
+    config.anthropicProxyApiKey = config.proxyApiKey;
+  }
+
   const claudeFunding = new Set(config.claudeFunding || []);
   const codexFunding = new Set(config.codexFunding || []);
   if (claudeFunding.has("subscription") && flags.anthropicAuth === undefined) {
@@ -358,6 +371,15 @@ export function applyConfigFile(flags) {
     const value = String(config[field.config_key] || "").trim();
     if (value && flags[field.config_key] === undefined) flags[field.config_key] = value;
   }
+  // ``proxy*`` was the original Claude/Anthropic naming. Keep it as an input alias, but
+  // normalize the explicit JSON names back to the internal flags used by the installer.
+  if (flags.proxyBaseUrl === undefined && flags.anthropicProxyBaseUrl !== undefined) {
+    flags.proxyBaseUrl = flags.anthropicProxyBaseUrl;
+  }
+  if (flags.proxyApiKey === undefined && flags.anthropicProxyApiKey !== undefined) {
+    flags.proxyApiKey = flags.anthropicProxyApiKey;
+  }
+
   if (flags.gatewayBaseUrl) {
     flags.privateGateway = true;
     // Take the self-hosted install path rather than the hosted browser claim, whose key is
@@ -1423,8 +1445,10 @@ async function selectClaudeFundingProviders(flags, selected) {
       || process.env.ANTHROPIC_AUTH_TOKEN)) supplied.add("subscription");
   if (flags.anthropicApiKey || process.env.ANTHROPIC_API_KEY) supplied.add("anthropic-api");
   if (flags.openrouterApiKey || process.env.OPENROUTER_API_KEY) supplied.add("openrouter");
-  if ((flags.proxyBaseUrl || process.env.PENNYROUTER_PROXY_BASE_URL)
-      && (flags.proxyApiKey || process.env.PENNYROUTER_PROXY_API_KEY)) {
+  if ((flags.proxyBaseUrl || process.env.PENNYROUTER_ANTHROPIC_PROXY_BASE_URL
+      || process.env.PENNYROUTER_PROXY_BASE_URL)
+      && (flags.proxyApiKey || process.env.PENNYROUTER_ANTHROPIC_PROXY_API_KEY
+      || process.env.PENNYROUTER_PROXY_API_KEY)) {
     supplied.add("anthropic-proxy");
   }
   // A --config file states its providers outright, and that choice stands whether or not the
@@ -1559,10 +1583,14 @@ async function configureUserFunding(flags, selected, claudeAnthropicAuth,
     flags.openaiProxyApiKey || process.env.PENNYROUTER_OPENAI_PROXY_API_KEY || "",
   ).trim();
   let proxyBaseUrl = String(
-    flags.proxyBaseUrl || process.env.PENNYROUTER_PROXY_BASE_URL || "",
+    flags.proxyBaseUrl || flags.anthropicProxyBaseUrl
+      || process.env.PENNYROUTER_ANTHROPIC_PROXY_BASE_URL
+      || process.env.PENNYROUTER_PROXY_BASE_URL || "",
   ).trim();
   let proxyApiKey = String(
-    flags.proxyApiKey || process.env.PENNYROUTER_PROXY_API_KEY || "",
+    flags.proxyApiKey || flags.anthropicProxyApiKey
+      || process.env.PENNYROUTER_ANTHROPIC_PROXY_API_KEY
+      || process.env.PENNYROUTER_PROXY_API_KEY || "",
   ).trim();
   const codexSubscriptionAuth = wantsCodex && codexProviders.has("subscription")
     ? await detectCodexChatgptAuth()
@@ -2401,7 +2429,7 @@ function printHelp() {
   console.log(`PennyRouter CLI
 
 Usage:
-  pennyrouter install [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes] [--dry-run] [--make-default|--penny-only] [--no-path-update] [--no-mcp] [--anthropic-auth|--no-anthropic-auth] [--anthropic-api-key KEY] [--openai-api-key KEY] [--openai-proxy-base-url URL --openai-proxy-api-key KEY] [--openrouter-api-key KEY] [--proxy-base-url URL --proxy-api-key KEY] [--private-gateway[=URL] [--email you@example.com]] [--gateway-base-url URL] [--private-key pr-...] [--local[=URL]|--prod] [--config PATH]
+  pennyrouter install [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes] [--dry-run] [--make-default|--penny-only] [--no-path-update] [--no-mcp] [--anthropic-auth|--no-anthropic-auth] [--anthropic-api-key KEY] [--openai-api-key KEY] [--openai-proxy-base-url URL --openai-proxy-api-key KEY] [--openrouter-api-key KEY] [--anthropic-proxy-base-url URL --anthropic-proxy-api-key KEY] [--proxy-base-url URL --proxy-api-key KEY] [--private-gateway|--private-server[=URL] [--email you@example.com]] [--gateway-base-url URL] [--private-key pr-...] [--local[=URL]|--prod] [--config PATH]
   pennyrouter update [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--dry-run] [--penny-key pr-...] [--gateway-base-url URL|--local[=URL]|--prod] [--no-mcp]
   pennyrouter auth anthropic [--penny-key pr-...] [--token oauth-token] [--token-command CMD] [--gateway-base-url URL] [--forget]
   pennyrouter disable [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes]

package/src/install-manifest.json

@@ -56,12 +56,12 @@
           "name": "Proxy (e.g., Bedrock, Azure, private server)",
           "fields": [
             {
-              "config_key": "proxyBaseUrl",
-              "label": "Proxy base URL",
+              "config_key": "anthropicProxyBaseUrl",
+              "label": "Anthropic proxy base URL",
               "secret": false,
               "placeholder": "https://proxy.example.com"
             },
-            { "config_key": "proxyApiKey", "label": "Proxy API key", "secret": true }
+            { "config_key": "anthropicProxyApiKey", "label": "Anthropic proxy API key", "secret": true }
           ]
         }
       ]