chuan/CLIProxyAPI
1
0
Fork 0
mirror of https://github.com/router-for-me/CLIProxyAPI.git synced 2026-03-02 04:24:11 +08:00
Code Issues Packages Projects Releases Wiki Activity
739 Commits 5 Branches 504 Tags
506f1117dd2ba09dd76e26cf993fdc107e253f74
Commit Graph

535 Commits

  • **fix(handlers): refactor API response capture to append data safely** 
    - Introduced `appendAPIResponse` helper to preserve and append data to existing API responses.
- Ensured newline inclusion when appending, if necessary.
- Improved `nil` and data type checks for response handling.
- Updated middleware to skip request logging for `GET` requests.
    Luis Pater · 2025-11-25 11:37:02 +08:00
    506f1117dd
  • **fix(executor): update antigravity executor to enhance model metadata handling** 
    - Added additional metadata fields (`Name`, `Description`, `DisplayName`, `Version`) to `ModelInfo` struct initialization for better model representation.
- Removed unnecessary whitespace in the code.
    Luis Pater · 2025-11-25 09:19:01 +08:00
    113db3c5bf
  • fix(registry): correct Claude Opus 4.5 created timestamp 
    Update epoch from 1730419200 (2024-11-01) to 1761955200 (2025-11-01).
    Ben Vargas · 2025-11-24 12:27:23 -07:00
    0895533400
  • feat(registry): add Claude Opus 4.5 model definition 
    Add support for claude-opus-4-5-20251101 with 200K context window
and 64K max output tokens.
    Ben Vargas · 2025-11-24 12:26:39 -07:00
    43f007c234
  • feat(logs): add limit query param to cap returned logs
    hkfires · 2025-11-24 19:59:24 +08:00
    943a8c74df
  • **fix(translator): add conditional check for key renaming in Gemini tools** 
    - Ensured `functionDeclarations` key renaming only occurs if the key exists in Gemini tools processing.
- Prevented unnecessary JSON reassignment when the target key is absent.
    Luis Pater · 2025-11-24 17:15:43 +08:00
    0a47b452e9
  • **fix(translator): adjust key renaming logic in Gemini request processing** 
    - Fixed parameter key renaming to correctly handle `functionDeclarations` and `parametersJsonSchema` in Gemini tools.
- Resolved potential overwriting issue by reassigning JSON strings after each key rename.
    Luis Pater · 2025-11-24 17:12:04 +08:00
    261f08a82a
  • **feat(config): add TLS support for HTTPS server configuration** 
    - Introduced `TLSConfig` to support HTTPS configurations, including enabling TLS, specifying certificate and key files.
- Updated HTTP server logic to handle HTTPS mode when TLS is enabled.
- Enhanced `config.example.yaml` with TLS settings example.
- Adjusted internal URL generation to respect protocol based on TLS state.
    Luis Pater · 2025-11-24 10:41:29 +08:00
    d114d8d0bd
  • #293 
    **feat(retry): add configurable retry logic with cooldown support**

- Introduced `max-retry-interval` configuration for cooldown durations between retries.
- Added `SetRetryConfig` in `Manager` to handle retry attempts and cooldown intervals.
- Enhanced provider execution logic to include retry attempts, cooldown management, and dynamic wait periods.
- Updated API endpoints and YAML configuration to support `max-retry-interval`.
    Luis Pater · 2025-11-24 09:55:15 +08:00
    7063a176f4
  • **feat(logging, middleware): add error-based logging support and error log management** 
    - Introduced `logOnErrorOnly` mode to enable logging only for error responses when request logging is disabled.
- Added endpoints to list and download error logs (`/request-error-logs`).
- Implemented error log file cleanup to retain only the newest 10 logs.
- Refactored `ResponseWriterWrapper` to support forced logging for error responses.
- Enhanced middleware to capture data for upstream error persistence.
- Improved log file naming and error log filename generation.
    Luis Pater · 2025-11-23 22:41:57 +08:00
    e3082887a6
  • **fix(translator): reintroduce thoughtSignature bypass logic for model parts** 
    - Restored `thoughtSignature` validator bypass for model-specific parts in Gemini content processing.
- Removed redundant logic from the `executor` for cleaner handling.
    Luis Pater · 2025-11-23 20:52:23 +08:00
    ddb0c0ec1c
  • fix(aistudio): strip Gemini generation config overrides 
    Remove generationConfig.maxOutputTokens, generationConfig.responseMimeType and generationConfig.responseJsonSchema from the Gemini payload in translateRequest so we no longer send unsupported or conflicting response configuration fields. This lets the backend or caller control response formatting and output limits and helps prevent potential API errors caused by these keys.
    hkfires · 2025-11-23 19:44:03 +08:00
    62bfd62871
  • **chore(executor): update default agent version and simplify const formatting** 
    - Updated `defaultAntigravityAgent` to version `1.11.5`.
- Adjusted const value formatting for improved readability.

**feat(executor): introduce fallback mechanism for Antigravity base URLs**

- Added retry logic with fallback order for Antigravity base URLs to handle request errors and rate limits.
- Refactored base URL handling with `antigravityBaseURLFallbackOrder` and related utilities.
- Enhanced error handling in non-streaming and streaming requests with retry support and improved metadata reporting.
- Updated `buildRequest` to support dynamic base URL assignment.
    Luis Pater · 2025-11-23 17:53:07 +08:00
    257621c5ed
  • **feat(executor, translator): enhance token handling and payload processing** 
    - Improved Antigravity executor to handle `thinkingConfig` adjustments and default `thinkingBudget` when `thinkingLevel` is removed.
- Updated translator response handling to set default values for output token counts when specific token data is missing.
    Luis Pater · 2025-11-23 11:32:37 +08:00
    ac064389ca
  • **feat(executor): add model alias mapping and improve Antigravity payload handling** 
    - Introduced `modelName2Alias` and `alias2ModelName` functions for mapping between model names and aliases.
- Improved Antigravity payload transformation to include alias-to-model name conversion.
- Enhanced processing for Claude Sonnet models to adjust template parameters based on schema presence.
    Luis Pater · 2025-11-23 03:16:14 +08:00
    8d23ffc873
  • **feat(watcher): optimize auth file handling with hash-based change detection** 
    - Added `authFileUnchanged` to skip reloads for unchanged files based on SHA256 hash comparisons.
- Introduced `isKnownAuthFile` to verify known files before handling removal events.
- Improved event processing in `handleEvent` to reduce unnecessary reloads and enhance performance.
    Luis Pater · 2025-11-23 01:22:16 +08:00
    4307f08bbc
  • **feat(translator): improve content processing and Antigravity request conversion** 
    - Refactored response translation logic to support mixed content types (`input_text`, `output_text`, `input_image`) with better role assignments and part handling.
- Added image processing logic for embedding inline data with MIME type and base64 encoded content.
- Updated Antigravity request conversion to replace Gemini CLI references for consistency.
    Luis Pater · 2025-11-22 21:34:34 +08:00
    9d50a68768
  • fix(gemini): parse stream usage from JSON, skip thoughtSignature
    hkfires · 2025-11-22 16:07:12 +08:00
    166fa9e2e6
  • fix(gemini): filter SSE usage metadata in streams
    hkfires · 2025-11-22 15:53:36 +08:00
    88e566281e
  • fix(runtime): treat non-empty finishReason as terminal
    hkfires · 2025-11-22 15:39:46 +08:00
    d32bb9db6b
  • fix(executor): expire stop chunks without usage metadata
    hkfires · 2025-11-22 15:27:47 +08:00
    8356b35320
  • feat(runtime): track antigravity usage and token counts
    hkfires · 2025-11-22 14:04:28 +08:00
    19a048879c
  • fix: handle empty and non-JSON SSE chunks safely
    hkfires · 2025-11-22 13:49:23 +08:00
    1061354b2f
  • fix: preserve SSE usage metadata-only trailing chunks
    hkfires · 2025-11-22 13:25:25 +08:00
    46b4110ff3
  • fix(translator): ignore empty JSON chunks in OpenAI responses
    hkfires · 2025-11-22 13:09:16 +08:00
    c29931e093
  • fix(translator): include empty text chunks in responses
    hkfires · 2025-11-22 13:03:50 +08:00
    b05cfd9f84
  • fix(sse): preserve usage metadata for stop chunks
    hkfires · 2025-11-22 12:50:23 +08:00
    8ce22b8403
  • Merge pull request #303 from router-for-me/image 
    feat(translator): support image size and googleSearch tools
    Luis Pater · 2025-11-22 11:20:58 +08:00
    d1cdedc4d1
  • Fixed: #302 
    **feat(executor): enhance WebSocket error handling and metadata logging**

- Added handling for stream closure before start with appropriate error recording.
- Improved metadata logging for non-OK HTTP status codes in WebSocket responses.
- Consolidated event processing logic with `processEvent` for better error handling and payload management.
- Refactored stream initialization to include the first event handling for smoother execution flow.
    Luis Pater · 2025-11-22 11:18:13 +08:00
    d291eb9489
  • feat(translator): support image size and googleSearch tools
    hkfires · 2025-11-22 10:36:52 +08:00
    dc8d3201e1
  • **feat(auth): implement Antigravity OAuth authentication flow** 
    - Added new endpoint `/antigravity-auth-url` to initiate Antigravity authentication.
- Implemented `RequestAntigravityToken` to manage the OAuth flow, including token exchange and user info retrieval.
- Introduced `.oauth-antigravity` temporary file handling for state and code management.
- Added `sanitizeAntigravityFileName` utility for safe token file names based on user email.
- Registered `/antigravity/callback` endpoint for OAuth redirects.
    Luis Pater · 2025-11-22 01:45:06 +08:00
    7757210af6
  • **feat(translator): add Antigravity translation logic** 
    - Introduced request and response translation functions to enable compatibility between OpenAI Chat Completions API and Antigravity.
- Registered translation utilities for both streaming and non-streaming scenarios.
- Added support for reasoning content, tool calls, and metadata handling.
- Established request normalization and embedding for Antigravity-compatible payloads.
- Added new fields to `Params` struct for better tracking of finish reasons, usage metadata, and tool usage.
- Refactored handling of response transitions, final events, and state-driven logic in `ConvertAntigravityResponseToClaude`.
- Introduced `appendFinalEvents` and `resolveStopReason` helper functions for cleaner separation of concerns.
- Added `TotalTokenCount` field to `Params` struct for enhanced token tracking.
- Updated token count calculations to fallback on `TotalTokenCount` when specific counts are missing.
- Introduced `hasNonZeroUsageMetadata` function to validate presence of token data in `usage_metadata`.
    Luis Pater · 2025-11-21 23:40:59 +08:00
    c1031e2d3f
  • fix(gemini-cli): ignore thoughtSignature and empty parts
    hkfires · 2025-11-21 17:12:56 +08:00
    abc2465b29
  • feat(executor): share SSE usage filtering across streams
    hkfires · 2025-11-21 16:51:05 +08:00
    4ba5b43d82
  • **feat(auth, executor, cmd): add Antigravity provider integration** 
    - Implemented OAuth login flow for the Antigravity provider in `auth/antigravity.go`.
- Added `AntigravityExecutor` for handling requests and streaming via Antigravity APIs.
- Created `antigravity_login.go` command for triggering Antigravity authentication.
- Introduced OpenAI-to-Antigravity translation logic in `translator/antigravity/openai/chat-completions`.

**refactor(translator, executor): update Gemini CLI response translation and add Antigravity payload customization**

- Renamed Gemini CLI translation methods to align with response handling (`ConvertGeminiCliResponseToGemini` and `ConvertGeminiCliResponseToGeminiNonStream`).
- Updated `init.go` to reflect these method changes.
- Introduced `geminiToAntigravity` function to embed metadata (`model`, `userAgent`, `project`, etc.) into Antigravity payloads.
- Added random project, request, and session ID generators for enhanced tracking.
- Streamlined `buildRequest` to use `geminiToAntigravity` transformation before request execution.
    Luis Pater · 2025-11-21 12:43:16 +08:00
    2d84d2fb6a
  • Fixed: #291 
    **feat(executor): add thinking level to budget conversion utility**

- Introduced `ConvertThinkingLevelToBudget` to map thinking level ("high"/"low") to corresponding budget values.
- Applied the utility in `aistudio_executor.go` before stripping unsupported configs.
- Updated dependencies to include `tidwall/gjson` for JSON parsing.
    Luis Pater · 2025-11-21 00:48:12 +08:00
    cbcfeb92cc
  • **refactor(middleware): extract request logging logic and optimize condition checks** 
    - Added `shouldLogRequest` helper to simplify path-based request logging logic.
- Updated middleware to skip management endpoints for improved security.
- Introduced an explicit `nil` logger check for minimal overhead.
- Updated dependencies in `go.mod`.

**feat(auth): add handling for 404 response with retry logic**

- Introduced support for 404 `not_found` status with a 12-hour backoff period.
- Updated `manager.go` to align state and status messages for 404 scenarios.

**refactor(translator): comment out debug logging in Gemini responses request**
    Luis Pater · 2025-11-20 23:20:40 +08:00
    db81331ae8
  • Merge branch 'dev' into feat-amp-cli-module
    Luis Pater · 2025-11-20 20:26:47 +08:00
    9ff38dd785
  • **refactor(translator): remove service_tier from Codex OpenAI request payload**
    Luis Pater · 2025-11-20 20:12:06 +08:00
    98596c0a3f
  • feat(iflow): add cookie-based authentication endpoint
    hkfires · 2025-11-20 18:23:43 +08:00
    3f4f8b3b2d
  • **feat(registry): expand Gemini model definitions and support Vertex AI**
    Luis Pater · 2025-11-20 18:16:26 +08:00
    371324c090
  • **refactor(executor): simplify Gemini CLI execution and remove internal retry logic** 
    - Removed nested retry handling for 429 rate limit errors.
- Simplified request/response handling by cleaning redundant retry-related code.
- Eliminated `parseRetryDelay` function and max retry configuration logic.
    Luis Pater · 2025-11-20 17:49:37 +08:00
    d50b0f7524
  • security: fix localhost middleware header spoofing vulnerability 
    Fix critical security vulnerability in amp-restrict-management-to-localhost
feature where attackers could bypass localhost restriction by spoofing
X-Forwarded-For headers.

Changes:
- Use RemoteAddr (actual TCP connection) instead of ClientIP() in
  localhostOnlyMiddleware to prevent header spoofing attacks
- Add comprehensive test coverage for spoofing prevention (6 test cases)
- Update documentation with reverse proxy deployment guidance and
  limitations of the RemoteAddr approach

The fix prevents attacks like:
  curl -H "X-Forwarded-For: 127.0.0.1" https://server/api/user

Trade-off: Users behind reverse proxies will need to disable the feature
and use alternative security measures (firewall rules, proxy ACLs).

Addresses security review feedback from PR #287.
    Ben Vargas · 2025-11-19 22:09:04 -07:00
    a6cb16bb48
  • **refactor(registry): move Gemini 3 Pro Preview model definition to base set**
    Luis Pater · 2025-11-20 10:51:16 +08:00
    0586da9c2b
  • Fix amp v1beta1 routing and gemini retry config
    Ben Vargas · 2025-11-19 19:11:35 -07:00
    3d8d02bfc3
  • fix(amp): enable OAuth fallback for Gemini v1beta1 routes 
    AMP CLI sends Gemini requests to non-standard paths that were being
directly proxied to ampcode.com without checking for local OAuth.

This fix adds:
- GeminiBridge handler to transform AMP CLI paths to standard format
- Enhanced model extraction from AMP's /publishers/google/models/* paths
- FallbackHandler wrapper to check for local OAuth before proxying

Flow:
- If user has local Google OAuth → use it (free tier)
- If no local OAuth → fallback to ampcode.com (charges credits)

Fixes issue where gemini-3-pro-preview requests always charged AMP
credits even when user had valid Google Cloud OAuth configured.
    Ben Vargas · 2025-11-19 18:23:17 -07:00
    7ae00320dc
  • fix(amp): filter context-1m beta header for local OAuth providers 
    Amp CLI sends 'context-1m-2025-08-07' in Anthropic-Beta header which
requires a special 1M context window subscription. After upstream rebase
to v6.3.7 (commit 38cfbac), CLIProxyAPI now respects client-provided
Anthropic-Beta headers instead of always using defaults.

When users configure local OAuth providers (Claude, etc), requests bypass
the ampcode.com proxy and use their own API subscriptions. These personal
subscriptions typically don't include the 1M context beta feature, causing
'long context beta not available' errors.

Changes:
- Add filterBetaFeatures() helper to strip specific beta features
- Filter context-1m-2025-08-07 in fallback handler when using local providers
- Preserve full headers when proxying to ampcode.com (paid users get all features)
- Add 7 test cases covering all edge cases

This fix is isolated to the Amp module and only affects the local provider
path. Users proxying through ampcode.com are unaffected and receive full
1M context support as part of their paid service.
    Ben Vargas · 2025-11-19 18:23:17 -07:00
    72d82268e5
  • Add AMP fallback proxy and shared Gemini normalization 
    - add fallback handler that forwards Amp provider requests to ampcode.com when the provider isn’t configured locally
- wrap AMP provider routes with the fallback so requests always have a handler
- share Gemini thinking model normalization helper between core handlers and AMP fallback
    Ben Vargas · 2025-11-19 18:23:17 -07:00
    8193392bfe
  • feat: Add Amp CLI integration with comprehensive documentation 
    Add full Amp CLI support to enable routing AI model requests through the proxy
while maintaining Amp-specific features like thread management, user info, and
telemetry. Includes complete documentation and pull bot configuration.

Features:
- Modular architecture with RouteModule interface for clean integration
- Reverse proxy for Amp management routes (thread/user/meta/ads/telemetry)
- Provider-specific route aliases (/api/provider/{provider}/*)
- Secret management with precedence: config > env > file
- 5-minute secret caching to reduce file I/O
- Automatic gzip decompression for responses
- Proper connection cleanup to prevent leaks
- Localhost-only restriction for management routes (configurable)
- CORS protection for management endpoints

Documentation:
- Complete setup guide (USING_WITH_FACTORY_AND_AMP.md)
- OAuth setup for OpenAI (ChatGPT Plus/Pro) and Anthropic (Claude Pro/Max)
- Factory CLI config examples with all model variants
- Amp CLI/IDE configuration examples
- tmux setup for remote server deployment
- Screenshots and diagrams

Configuration:
- Pull bot disabled for this repo (manual rebase workflow)
- Config fields: AmpUpstreamURL, AmpUpstreamAPIKey, AmpRestrictManagementToLocalhost
- Compatible with upstream DisableCooling and other features

Technical details:
- internal/api/modules/amp/: Complete Amp routing module
- sdk/api/httpx/: HTTP utilities for gzip/transport
- 94.6% test coverage with 34 comprehensive test cases
- Clean integration minimizes merge conflict risk

Security:
- Management routes restricted to localhost by default
- Configurable via amp-restrict-management-to-localhost
- Prevents drive-by browser attacks on user data

This provides a production-ready foundation for Amp CLI integration while
maintaining clean separation from upstream code for easy rebasing.

Amp-Thread-ID: https://ampcode.com/threads/T-9e2befc5-f969-41c6-890c-5b779d58cf18
    Ben Vargas · 2025-11-19 18:23:17 -07:00
    9ad0f3f91e
  • fix(executor): prevent streaming on failed response when no fallback 
    Fix critical bug where ExecuteStream would create a streaming channel
from a failed (non-2xx) response after exhausting all retries with no
fallback models available.

When retries were exhausted on the last model, the code would break from
the inner loop but fall through to streaming channel creation (line 401),
immediately returning at line 461. This made the error handling code at
lines 464-471 unreachable, causing clients to receive an empty/closed
stream instead of a proper error response.

Solution: Check if httpResp is non-2xx before creating the streaming
channel. If failed, continue the outer loop to reach error handling.

Identified by: codex-bot review
Ref: https://github.com/router-for-me/CLIProxyAPI/pull/280#pullrequestreview-3484560423
    Ben Vargas · 2025-11-19 13:14:40 -07:00
    0ff094b87f