CLIProxyAPI

Merge pull request #1685 from lyd123qw2008/fix/auth-auto-refresh-interval

fix(auth): respect configured auto-refresh interval

Luis Pater · 2026-02-25 01:13:47 +08:00

aa1da8a858

Merge pull request #1663 from rensumo/main

feat: implement credential-based round-robin for gemini-cli

Luis Pater · 2026-02-24 06:02:50 +08:00

7cb398d167

Merge pull request #1527 from HEUDavid/feat/auth-hook

feat(auth): add post-auth hook mechanism

Luis Pater · 2026-02-24 05:33:13 +08:00

48732ba05e

fix(auth): respect configured auto-refresh interval

lyd123qw2008 · 2026-02-23 22:07:50 +08:00

450d1227bd

feat: implement credential-based round-robin for gemini-cli virtual auths

Changes the RoundRobinSelector to use two-level round-robin when
gemini-cli virtual auths are detected (via gemini_virtual_parent attr):
- Level 1: cycle across credential groups (parent accounts)
- Level 2: cycle within each group's project auths

Credentials start from a random offset (rand.IntN) for fair distribution.
Non-virtual auths and single-credential scenarios fall back to flat RR.

Adds 3 test cases covering multi-credential grouping, single-parent
fallback, and mixed virtual/non-virtual fallback.

rensumo · 2026-02-21 12:49:48 +08:00

5936f9895c

fix: ensure connection-scoped headers are filtered in upstream requests

- Added `connectionScopedHeaders` utility to respect "Connection" header directives.
- Updated `FilterUpstreamHeaders` to remove connection-scoped headers dynamically.
- Refactored and tested upstream header filtering with additional validations.
- Adjusted upstream header handling during retries to replace headers safely.

Luis Pater · 2026-02-19 13:19:10 +08:00

2789396435

Merge PR #1626 into codex/pr-1626

Luis Pater · 2026-02-19 04:49:14 +08:00

61da7bd981

Merge pull request #1625 from thebtf/feat/tool-prefix-config

feat: add per-auth tool_prefix_disabled option

Luis Pater · 2026-02-19 04:07:22 +08:00

252f7e0751

feat(logging, executor): add request logging tests and WebSocket-based Codex executor

- Introduced unit tests for request logging middleware to enhance coverage.
- Added WebSocket-based Codex executor to support Responses API upgrade.
- Updated middleware logic to selectively capture request bodies for memory efficiency.
- Enhanced Codex configuration handling with new WebSocket attributes.

Luis Pater · 2026-02-19 01:57:02 +08:00

bb86a0c0c4

feat: passthrough upstream response headers to clients

CPA previously stripped ALL response headers from upstream AI provider
APIs, preventing clients from seeing rate-limit info, request IDs,
server-timing and other useful headers.

Changes:
- Add Headers field to Response and StreamResult structs
- Add FilterUpstreamHeaders helper (hop-by-hop + security denylist)
- Add WriteUpstreamHeaders helper (respects CPA-set headers)
- ExecuteWithAuthManager/ExecuteCountWithAuthManager now return headers
- ExecuteStreamWithAuthManager returns headers from initial connection
- All 11 provider executors populate Response.Headers
- All handler call sites write filtered upstream headers before response

Filtered headers (not forwarded):
- RFC 7230 hop-by-hop: Connection, Transfer-Encoding, Keep-Alive, etc.
- Security: Set-Cookie
- CPA-managed: Content-Length, Content-Encoding

Kirill Turanskiy · 2026-02-18 00:16:22 +03:00

1f8f198c45

feat: add per-auth tool_prefix_disabled option

Allow disabling the proxy_ tool name prefix on a per-account basis.
Users who route their own Anthropic account through CPA can set
"tool_prefix_disabled": true in their OAuth auth JSON to send tool
names unchanged to Anthropic.

Default behavior is fully preserved — prefix is applied unless
explicitly disabled.

Changes:
- Add ToolPrefixDisabled() accessor to Auth (reads metadata key
  "tool_prefix_disabled" or "tool-prefix-disabled")
- Gate all 6 prefix apply/strip points with the new flag
- Add unit tests for the accessor

Kirill Turanskiy · 2026-02-17 21:48:19 +03:00

9261b0c20b

refactor(all): replace manual pointer assignments with new to enhance code readability and maintainability

Luis Pater · 2026-02-15 14:10:10 +08:00

46a6782065

feat/auth-hook: refactor RequstInfo to preserve original HTTP semantics

HEUDavid · 2026-02-12 07:11:17 +08:00

65debb874f

feat/auth-hook: add post auth hook [CR]

HEUDavid · 2026-02-12 07:11:17 +08:00

3caadac003

feat/auth-hook: add post auth hook

HEUDavid · 2026-02-12 07:11:17 +08:00

94563d622c

fix(translator): correct gemini-cli log prefix

hkfires · 2026-02-07 08:40:09 +08:00

b7e4f00c5f

Merge pull request #1390 from sususu98/fix/400-invalid-request-no-retry

fix(auth): 400 invalid_request_error 立即返回不再重试

Luis Pater · 2026-02-07 03:14:25 +08:00

f410dd0440

Merge pull request #1386 from shenshuoyaoyouguang/sync-auth-changes

fix(auth): normalize model key for thinking suffix in selectors

Luis Pater · 2026-02-07 03:12:01 +08:00

eb5582c17c

fix(kimi): add OAuth model-alias channel support and cover OAuth excluded-models with tests

LTbinglingfeng · 2026-02-07 01:16:39 +08:00

fc7b6ef086

fix(auth): 400 invalid_request_error 立即返回不再重试

当上游返回 400 Bad Request 且错误消息包含 invalid_request_error 时，
表示请求本身格式错误，切换账户不会改变结果。

修改：
- 添加 isRequestInvalidError 判定函数
- 内层循环遇到此错误立即返回，不遍历其他账户
- 外层循环不再对此类错误进行重试

sususu98 · 2026-02-02 17:35:51 +08:00

233be6272a

sdk/cliproxy/auth: update selector tests

chujian · 2026-02-02 05:26:04 +08:00

47cb52385e

refactor: consolidate channel send logic with context-safe handlers

Optimize channel operations by introducing reusable context-aware send functions (`send` and `sendErr`) across `wsrelay`, `handlers`, and `cliproxy`. Ensure graceful handling of canceled contexts during stream operations.

Luis Pater · 2026-01-28 10:58:35 +08:00

e93e05ae25

feat(auth): add support for request_retry and disable_cooling overrides

Implement `request_retry` and `disable_cooling` metadata overrides for authentication management. Update retry and cooling logic accordingly across `Manager`, Antigravity executor, and file synthesizer. Add tests to validate new behaviors.

Luis Pater · 2026-01-26 21:59:08 +08:00

70897247b2

feat(auth): add skip persistence context key for file watcher events

Introduce `WithSkipPersist` to disable persistence during Manager Update/Register calls, preventing write-back loops caused by redundant file writes. Add corresponding tests and integrate with existing file store and conductor logic.

Luis Pater · 2026-01-26 18:20:19 +08:00

9c341f5aa5

fix(auth): handle context cancellation in executor methods

Luis Pater · 2026-01-24 04:56:55 +08:00

c32e2a8196

Merge pull request #1171 from router-for-me/auth

refactor(auth): remove unused provider execution helpers

Chén Mù · 2026-01-23 19:43:42 +08:00

f353a54555

Merge pull request #1140 from sxjeru/main

fix(auth): handle quota cooldown in retry logic for transient errors

Chén Mù · 2026-01-23 19:43:17 +08:00

1d6e2e751d

refactor(auth): remove unused provider execution helpers

hkfires · 2026-01-23 19:12:55 +08:00

cc50b63422

fix(auth): include requested model in executor metadata

hkfires · 2026-01-23 18:30:08 +08:00

81b369aed9

fix(auth): handle quota cooldown in retry logic for transient errors

sxjeru · 2026-01-21 21:48:23 +08:00

30a59168d7

refactor(config): rename oauth-model-mappings to oauth-model-alias

hkfires · 2026-01-15 18:03:26 +08:00

fe5b3c80cb

fix(auth): apply API key model mapping to request model

hkfires · 2026-01-15 13:06:41 +08:00

8bc6df329f

fix(auth): use base model name for auth matching by stripping suffix

hkfires · 2026-01-15 13:06:41 +08:00

847be0e99d

refactor(thinking): refine configuration logging

hkfires · 2026-01-15 13:06:41 +08:00

f6a2d072e6

refactor(thinking): remove legacy utilities and simplify model mapping

hkfires · 2026-01-15 13:06:40 +08:00

2262479365

fix(thinking): fix auth matching for thinking suffix and json field conflicts

hkfires · 2026-01-15 13:06:39 +08:00

e8f5888d8e

refactor: improve thinking logic

hkfires · 2026-01-15 13:06:39 +08:00

0b06d637e7

feat(selector): add priority support for auth selection

Luis Pater · 2026-01-15 07:08:24 +08:00

6f8a8f8136

feat(executor): add HttpRequest support across executors for better http request handling

Luis Pater · 2026-01-10 16:25:25 +08:00

e8e3bc8616

refactor(logging): clean up oauth logs and debugs

hkfires · 2026-01-09 11:20:55 +08:00

ee62ef4745

Merge pull request #763 from mvelbaum/feature/improve-oauth-use-logging

feat(logging): disambiguate OAuth credential selection in debug logs

Luis Pater · 2026-01-09 04:43:21 +08:00

a2eba2cdf5

feat(executor): add token refresh timeout and improve context handling during refresh

Introduced `tokenRefreshTimeout` constant for token refresh operations and enhanced context propagation for `refreshToken` by embedding roundtrip information if available. Adjusted `refreshAuth` to ensure default context initialization and handle cancellation errors appropriately.

Luis Pater · 2026-01-04 00:26:08 +08:00

7a77b23f2d

fix(thinking): use model alias for thinking config resolution in mapped models

hkfires · 2025-12-31 17:09:22 +08:00

89db4e9481

refactor(executor): resolve upstream model at conductor level before execution

hkfires · 2025-12-30 19:31:54 +08:00

96340bf136

refactor(config): rename model mapping fields from from/to to name/alias

hkfires · 2025-12-30 11:07:59 +08:00

d443c86620

refactor(config): rename model-name-mappings to oauth-model-mappings

hkfires · 2025-12-30 11:07:58 +08:00

7be3f1c36c

feat(cliproxy): introduce global model name mappings for improved aliasing and routing

Luis Pater · 2025-12-30 08:13:06 +08:00

50e6d845f4

refactor(logging): streamline auth selection debug messages

Reduce duplicate Debugf calls by appending proxy info via an optional suffix and keep the debug-level guard inside the helper.

Michael Velbaum · 2025-12-28 16:10:11 +02:00

cb3bdffb43

refactor(logging): pass request entry into auth selection log

Avoid re-creating the request-scoped log entry in the helper and use a switch for account type dispatch.

Michael Velbaum · 2025-12-28 15:51:11 +02:00

48f19aab51

refactor(logging): dedupe auth selection debug logs

Extract repeated debug logging for selected auth credentials into a helper so execute, count, and stream paths stay consistent.

Michael Velbaum · 2025-12-28 15:42:35 +02:00

48f6d7abdf

101 Commits