[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_254":255,"_256":257},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_190":-5,"_20":191,"_22":192,"_193":194,"_195":196,"_25":197,"_24":-5,"_198":-5,"_199":-5,"_200":56,"_201":202,"_203":47,"_204":-5,"_205":-5,"_206":207},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","allanhorca07","name","agentr","branchName","main","version","path","","project",{"_36":135,"_13":14,"_48":136,"_137":-5,"_138":56,"_139":140,"_141":140,"_142":19,"_143":-5,"_144":145,"_146":61,"_147":47,"_148":-5,"_149":-5,"_150":73,"_151":152,"_153":154,"_155":156,"_157":158,"_159":-5,"_160":161,"_162":161,"_163":164,"_165":164,"_166":164,"_167":161,"_168":161,"_169":170,"_171":172,"_173":174,"_175":56},"tree",[83,84,85,86],"file","contents",[32,33,34,35],"upstream","pull","ahead","behind","envVars",{"_36":76,"_13":77,"_39":78,"_41":-5,"_42":43,"_44":79,"_46":47,"_48":80,"_17":73,"_51":81,"_53":-5,"_55":56,"_57":-5,"_18":82},{"_36":68,"_13":69,"_39":70,"_41":-5,"_42":43,"_44":71,"_46":47,"_48":72,"_17":73,"_51":24,"_53":74,"_55":56,"_57":-5,"_18":75},{"_36":59,"_13":60,"_39":61,"_41":-5,"_42":43,"_44":62,"_46":47,"_48":63,"_17":64,"_51":65,"_53":66,"_55":56,"_57":14,"_18":67},{"_36":37,"_13":38,"_39":40,"_41":-5,"_42":43,"_44":45,"_46":47,"_48":49,"_17":50,"_51":52,"_53":54,"_55":56,"_57":-5,"_18":58},"id","218727b9-e665-428b-90ce-3af4528fb17d","serve.ts","fileId","b9857afa-8d9d-11f1-8c0e-1607ee4eb77e","parentId","branchId","39fa55ca-b4fc-4340-aa3d-eb8f1f7bf8d4","branchVersion",12,"latest",true,"createdAt",["D",1785586685667],1,"fileType","script","content","#!/usr/bin/env -S deno run --allow-net --allow-env\n// Local AgentRouter proxy — run this on your own machine so requests come\n// from your residential IP instead of a cloud IP (avoids the upstream WAF).\n//\n// Run straight from Val Town (no download needed):\n// deno run --allow-net --allow-env https://esm.town/v/allanhorca07/agentr/serve.ts\n//\n// Or, after `vt clone allanhorca07/agentr`:\n// deno run --allow-net --allow-env serve.ts [port]\n//\n// Env vars:\n// AGENTROUTER_API_KEY fallback key when the client sends none\n// AGENTROUTER_UPSTREAM upstream base URL (default https://agentrouter.org)\n// AGENTROUTER_DEBUG=1 verbose request/SSE logging\n// AGENTROUTER_UA_MODE opencode (default) | auto | passthrough\n//\n// Point your agent at it:\n// OpenCode / OpenAI SDK -> http://localhost:4182/v1\n// Claude Code -> ANTHROPIC_BASE_URL=http://localhost:4182\n\nimport { handleProxy, type ProxyConfig } from \"./lib/proxy.ts\";\n\nconst PORT = Number(Deno.args[0] ?? Deno.env.get(\"PORT\") ?? 4182);\n\nconst config: ProxyConfig = {\n upstream: Deno.env.get(\"AGENTROUTER_UPSTREAM\") ?? \"https://agentrouter.org\",\n apiKey: Deno.env.get(\"AGENTROUTER_API_KEY\") ?? undefined,\n debug: Deno.env.get(\"AGENTROUTER_DEBUG\") === \"1\",\n uaMode:\n (Deno.env.get(\"AGENTROUTER_UA_MODE\") as ProxyConfig[\"uaMode\"]) ?? \"opencode\",\n browserHeaders: false, // not needed from a residential IP\n retryOnBlock: true,\n};\n\nconsole.log(`[ar] AgentRouter proxy listening on http://localhost:${PORT}`);\nconsole.log(`[ar] upstream: ${config.upstream}`);\nconsole.log(`[ar] ua mode: ${config.uaMode}`);\nconsole.log(`[ar] api key: ${config.apiKey ? \"set (fallback)\" : \"not set — clients must send their own\"}`);\nconsole.log(`[ar] debug: ${config.debug ? \"on\" : \"off\"}`);\nconsole.log(`[ar] try: curl http://localhost:${PORT}/_stats`);\n\nDeno.serve({ port: PORT }, (request) => handleProxy(request, config));\n","deleted",false,"label",[38],"e6194f31-8ca8-43a5-949f-386a6e30af3d","main.ts","06a16a62-8d92-11f1-9708-1607ee4eb77e",13,["D",1785586690628],6,"http","// Val Town HTTP entrypoint — same proxy core as the local serve.ts.\n//\n// NOTE: agentrouter.org sits behind an Alibaba Cloud WAF that challenges\n// datacenter IPs with a JS captcha, so requests from Val Town usually come\n// back as an HTML captcha page. Run serve.ts locally for real traffic; this\n// endpoint is useful for testing the proxy logic itself.\n\nimport { handleProxy, type ProxyConfig } from \"./lib/proxy.ts\";\n\nconst config: ProxyConfig = {\n upstream: Deno.env.get(\"AGENTROUTER_UPSTREAM\") ?? \"https://agentrouter.org\",\n apiKey: Deno.env.get(\"AGENTROUTER_API_KEY\") ?? undefined,\n debug: Deno.env.get(\"AGENTROUTER_DEBUG\") === \"1\",\n uaMode:\n (Deno.env.get(\"AGENTROUTER_UA_MODE\") as ProxyConfig[\"uaMode\"]) ?? \"opencode\",\n browserHeaders: true, // best-effort against the upstream WAF\n retryOnBlock: true,\n};\n\nexport default async function (request: Request): Promise {\n return await handleProxy(request, config);\n}\n",[60],"d3bf58b5-0838-49ad-b96f-bc8eab88a8e9","README.md","28db862e-8da3-11f1-8231-1607ee4eb77e",14,["D",1785586732892],0,"# agentr — AgentRouter proxy for coding agents\n\nAn OpenAI/Anthropic-compatible proxy that sits between your coding agent\n(Claude Code, OpenCode, Cursor, plain SDKs) and `agentrouter.org`. It repairs\nthe quirks that make agents fail against that upstream: null-valued fields,\nbroken SSE frames, and false-positive content blocks.\n\n## Architecture\n\n```mermaid\nflowchart LR\n CC[Claude Code
/v1/messages] --> P\n OC[OpenCode
/v1/chat/completions] --> P\n SDK[OpenAI / Anthropic SDK] --> P\n P[proxy
serve.ts or main.ts] --> L[lib/proxy.ts]\n L --> D[lib/clients.ts
detect agent + dialect]\n L --> B[lib/body.ts
strip nulls, preamble, trim]\n L --> S[lib/sse.ts
filter bad frames]\n L --> U[(agentrouter.org)]\n```\n\n## Files\n\n| File | Role |\n|---|---|\n| `serve.ts` | **Local** Deno server (run this for real traffic) |\n| `main.ts` | Val Town HTTP entrypoint — same logic, hosted |\n| `lib/proxy.ts` | Core handler: headers, retry, stats, response finalize |\n| `lib/clients.ts` | Agent detection (Claude Code / OpenCode / Cursor / SDK / curl) |\n| `lib/body.ts` | Null stripping, preamble injection, context trimming |\n| `lib/sse.ts` | SSE stream repair |\n\n## Features\n\n1. **Agent + dialect detection** — inspects `User-Agent`, `anthropic-version`,\n `x-api-key`, `x-app` and the request path to classify each request as\n `claude-code`, `opencode`, `cursor`, `anthropic-sdk`, `openai-sdk`, `curl`,\n or `browser`, and whether it speaks the **OpenAI** or **Anthropic** dialect.\n The detected identity is forwarded as `X-Client-Kind` / `X-Client-Version`\n and counted in `/_stats`.\n2. **Dialect-aware preamble injection** — the educational preamble goes into\n `messages[].role=system` for OpenAI-style requests and into the top-level\n `system` field for Anthropic-style ones (string or text-block form).\n3. **Null stripping** — recursively removes `null` fields (`response_format:\n null` etc.) that AgentRouter rejects with `400 expected object, received null`.\n4. **SSE repair** — drops `data: null` and `billing.summary` frames that crash\n strict AI-SDK parsers, while preserving event framing.\n5. **Content-block auto-retry** — on a block-looking 400/403/451, retries once\n with context trimmed to system + last user message, and logs the offending\n message.\n6. **Stats endpoint** — `GET /_stats` reports requests, blocks, retry\n outcomes, filtered SSE lines, and per-client / per-path counters.\n7. **UA modes** — `opencode` (default, the known-accepted UA), `auto`\n (per-client UA), or `passthrough` (forward the client's own).\n\n## Run locally (recommended)\n\n`agentrouter.org` is behind an Alibaba Cloud WAF that challenges datacenter\nIPs with a JS captcha, so hosted requests come back as an HTML captcha page.\nFrom your own machine it works normally.\n\n```bash\n# no download needed — Deno runs it straight from Val Town\ndeno run --allow-net --allow-env https://esm.town/v/allanhorca07/agentr/serve.ts\n\n# or clone and run\nvt clone allanhorca07/agentr && cd agentr\ndeno run --allow-net --allow-env serve.ts\n```\n\nListens on `http://localhost:4182` (pass a port as the first arg to change it).\n\n### Environment variables\n\n| Var | Default | Purpose |\n|---|---|---|\n| `AGENTROUTER_API_KEY` | — | Fallback key when the client sends none |\n| `AGENTROUTER_UPSTREAM` | `https://agentrouter.org` | Upstream base URL |\n| `AGENTROUTER_DEBUG` | off | `1` = log each request, drops, retries |\n| `AGENTROUTER_UA_MODE` | `opencode` | `opencode` \\| `auto` \\| `passthrough` |\n\n### Test it\n\n```bash\ncurl http://localhost:4182/_stats\n\ncurl http://localhost:4182/v1/chat/completions \\\n -H \"Content-Type: application/json\" \\\n -H \"Authorization: Bearer $AGENTROUTER_API_KEY\" \\\n -d '{\"model\":\"gpt-4o-mini\",\"messages\":[{\"role\":\"user\",\"content\":\"Say hello\"}],\"max_tokens\":50}'\n```\n\n### Point your agent at it\n\n```bash\n# OpenCode / OpenAI-compatible clients\nexport OPENAI_BASE_URL=http://localhost:4182/v1\nexport OPENAI_API_KEY=sk-...\n\n# Claude Code\nexport ANTHROPIC_BASE_URL=http://localhost:4182\nexport ANTHROPIC_API_KEY=sk-...\n```\n\n## Hosted endpoint\n\n runs the same code. `/_stats` works; proxied calls to\nthe upstream return the WAF captcha page because of the datacenter-IP block.\nUse it to verify proxy behavior, not for real traffic.\n",[69],"77f00101-ea9b-486b-907f-c630c9da0dd6","lib","f74cd905-810a-4a24-a316-c29c77807bfe",8,["D",1785586592933],"directory",[77],{"_36":76,"_13":77,"_39":78,"_41":-5,"_42":43,"_44":79,"_46":47,"_48":97,"_17":73,"_51":81,"_53":-5,"_55":56,"_57":-5,"_88":98,"_18":99},{"_36":68,"_13":69,"_39":70,"_41":-5,"_42":43,"_44":71,"_46":47,"_48":94,"_17":73,"_51":24,"_53":74,"_55":56,"_57":-5,"_88":95,"_18":96},{"_36":59,"_13":60,"_39":61,"_41":-5,"_42":43,"_44":62,"_46":47,"_48":91,"_17":64,"_51":65,"_53":66,"_55":56,"_57":14,"_88":92,"_18":93},{"_36":37,"_13":38,"_39":40,"_41":-5,"_42":43,"_44":45,"_46":47,"_48":87,"_17":50,"_51":52,"_53":54,"_55":56,"_57":-5,"_88":89,"_18":90},["D",1785586685667],"children",[],[38],["D",1785586690628],[],[60],["D",1785586732892],[],[69],["D",1785586592933],[100,101,102,103],[77],{"_36":127,"_13":128,"_39":129,"_41":78,"_42":43,"_44":130,"_46":47,"_48":131,"_17":73,"_51":52,"_53":132,"_55":56,"_57":-5,"_88":133,"_18":134},{"_36":120,"_13":121,"_39":122,"_41":78,"_42":43,"_44":79,"_46":47,"_48":123,"_17":73,"_51":52,"_53":124,"_55":56,"_57":-5,"_88":125,"_18":126},{"_36":112,"_13":113,"_39":114,"_41":78,"_42":43,"_44":115,"_46":47,"_48":116,"_17":73,"_51":52,"_53":117,"_55":56,"_57":-5,"_88":118,"_18":119},{"_36":104,"_13":105,"_39":106,"_41":78,"_42":43,"_44":107,"_46":47,"_48":108,"_17":73,"_51":52,"_53":109,"_55":56,"_57":-5,"_88":110,"_18":111},"08c77dae-b556-41fb-9972-4590a2fd17a8","sse.ts","e8e9cca6-8da2-11f1-adbf-1607ee4eb77e",10,["D",1785586625694],"// SSE stream repair.\n//\n// AgentRouter emits frames that break strict OpenAI/Anthropic SSE parsers:\n// * `data: null` -> AI SDK throws on JSON.parse(null) shapes\n// * `billing.summary` events -> unknown event type, not in the spec\n// This TransformStream drops those lines and passes everything else through\n// untouched, preserving the blank-line framing between events.\n\nexport interface SseFilterHooks {\n onDrop?: (line: string) => void;\n debug?: (msg: string) => void;\n}\n\nexport function shouldDropSseLine(line: string): boolean {\n const t = line.trim();\n if (t === \"\") return false; // blank line = event separator, must keep\n\n if (!t.startsWith(\"data:\") && !t.startsWith(\"event:\")) return false;\n\n const payload = t.startsWith(\"data:\")\n ? t.slice(5).trim()\n : t.slice(6).trim();\n\n if (payload === \"null\" || payload === \"undefined\") return true;\n if (payload.includes(\"billing.summary\")) return true;\n\n return false;\n}\n\nexport function sseFilter(\n hooks: SseFilterHooks = {},\n): TransformStream {\n const decoder = new TextDecoder();\n const encoder = new TextEncoder();\n let buffer = \"\";\n\n return new TransformStream({\n transform(chunk, controller) {\n buffer += decoder.decode(chunk, { stream: true });\n\n // Keep the trailing partial line in the buffer.\n const lines = buffer.split(\"\\n\");\n buffer = lines.pop() ?? \"\";\n\n const out: string[] = [];\n for (const line of lines) {\n if (shouldDropSseLine(line)) {\n hooks.onDrop?.(line);\n hooks.debug?.(`[sse] dropped: ${line.slice(0, 120)}`);\n continue;\n }\n out.push(line);\n }\n\n if (out.length) {\n controller.enqueue(encoder.encode(out.join(\"\\n\") + \"\\n\"));\n }\n },\n\n flush(controller) {\n buffer += decoder.decode();\n if (buffer && !shouldDropSseLine(buffer)) {\n controller.enqueue(encoder.encode(buffer));\n }\n },\n });\n}\n",[],[77,105],"179f1eee-d50e-48e2-8c32-439aa4e62ea1","proxy.ts","000caff2-8da3-11f1-a841-1607ee4eb77e",11,["D",1785586664506],"// Shared proxy core. Used by serve.ts (local Deno server) and main.ts\n// (Val Town HTTP val) so both behave identically.\n\nimport {\n type ClientInfo,\n DEFAULT_UA,\n detectClient,\n UPSTREAM_UA,\n} from \"./clients.ts\";\nimport {\n injectSystemPreamble,\n looksContentBlocked,\n stripNullValues,\n summarizeBody,\n trimContextForRetry,\n} from \"./body.ts\";\nimport { sseFilter } from \"./sse.ts\";\n\nexport interface ProxyConfig {\n upstream: string;\n /** Fallback API key when the client sends no Authorization header. */\n apiKey?: string;\n /** Dump request/response detail to the console. */\n debug?: boolean;\n /**\n * \"opencode\" – always send opencode/1.17.12 upstream (default, known-good)\n * \"auto\" – send a UA matching the detected client\n * \"passthrough\" – forward the client's own UA untouched\n */\n uaMode?: \"opencode\" | \"auto\" | \"passthrough\";\n /** Add browser-ish Accept/Sec-Fetch headers (helps with some WAFs). */\n browserHeaders?: boolean;\n /** Retry once with trimmed context when a content-block is detected. */\n retryOnBlock?: boolean;\n}\n\nexport const stats = {\n startedAt: new Date().toISOString(),\n requests: 0,\n content_blocked: 0,\n retry_success: 0,\n retry_failed: 0,\n sse_lines_filtered: 0,\n upstream_errors: 0,\n by_client: {} as Record,\n by_path: {} as Record,\n};\n\nconst CORS: Record = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET,POST,PUT,PATCH,DELETE,OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n};\n\n/** Headers that must never be forwarded upstream. */\nconst HOP_BY_HOP = new Set([\n \"connection\",\n \"keep-alive\",\n \"transfer-encoding\",\n \"upgrade\",\n \"proxy-authorization\",\n \"proxy-connection\",\n \"te\",\n \"trailer\",\n \"host\",\n \"content-length\",\n \"accept-encoding\",\n \"cf-connecting-ip\",\n \"cf-ray\",\n \"cf-visitor\",\n \"x-forwarded-for\",\n \"x-forwarded-proto\",\n \"x-forwarded-host\",\n \"x-real-ip\",\n \"x-vt-signature\",\n]);\n\nexport async function handleProxy(\n request: Request,\n config: ProxyConfig,\n): Promise {\n const {\n upstream,\n apiKey,\n debug = false,\n uaMode = \"opencode\",\n browserHeaders = false,\n retryOnBlock = true,\n } = config;\n\n const log = (msg: string) => {\n if (debug) console.log(msg);\n };\n\n if (request.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n const url = new URL(request.url);\n\n if (request.method === \"GET\" && url.pathname === \"/_stats\") {\n return Response.json({\n status: \"running\",\n info: \"AgentRouter Proxy (TypeScript)\",\n upstream,\n uaMode,\n timestamp: new Date().toISOString(),\n stats,\n }, { headers: CORS });\n }\n\n // ── Identify the calling agent ────────────────────────────────────────\n const client = detectClient(request, url.pathname);\n stats.requests++;\n stats.by_client[client.kind] = (stats.by_client[client.kind] ?? 0) + 1;\n stats.by_path[url.pathname] = (stats.by_path[url.pathname] ?? 0) + 1;\n\n log(\n `[ar] ${request.method} ${url.pathname} client=${client.kind}` +\n `${client.version ? `@${client.version}` : \"\"} flavor=${client.flavor}`,\n );\n\n const targetUrl = `${upstream}${url.pathname}${url.search}`;\n const headers = buildHeaders(request, {\n upstream,\n client,\n apiKey,\n uaMode,\n browserHeaders,\n });\n\n // ── Clean up the request body ─────────────────────────────────────────\n let bodyText: string | null = null;\n let cleanedBody: string | null = null;\n let wantsStream = false;\n\n if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n bodyText = await request.text();\n try {\n let obj = JSON.parse(bodyText);\n if (typeof obj === \"object\" && obj !== null) {\n wantsStream = obj.stream === true;\n obj = stripNullValues(obj);\n obj = injectSystemPreamble(obj, client.flavor);\n }\n cleanedBody = JSON.stringify(obj);\n } catch {\n cleanedBody = bodyText || null;\n }\n }\n\n // ── First attempt ─────────────────────────────────────────────────────\n let upstreamResponse: Response;\n try {\n upstreamResponse = await fetch(targetUrl, {\n method: request.method,\n headers,\n body: cleanedBody,\n redirect: \"follow\",\n });\n } catch (error) {\n stats.upstream_errors++;\n console.error(`[ar] proxy failure: ${(error as Error).message}`);\n return Response.json(\n { error: { message: `Proxy Error: ${(error as Error).message}`, type: \"proxy_error\" } },\n { status: 502, headers: CORS },\n );\n }\n\n // ── Content-block mitigation: retry once with trimmed context ─────────\n if (upstreamResponse.status >= 400) {\n const errorText = await upstreamResponse.text();\n stats.upstream_errors++;\n\n if (\n retryOnBlock && cleanedBody &&\n looksContentBlocked(upstreamResponse.status, errorText)\n ) {\n stats.content_blocked++;\n logBlocked(cleanedBody, errorText);\n\n try {\n const trimmed = JSON.stringify(\n trimContextForRetry(JSON.parse(cleanedBody), client.flavor),\n );\n log(\"[ar] retrying with trimmed context\");\n\n const retry = await fetch(targetUrl, {\n method: request.method,\n headers,\n body: trimmed,\n redirect: \"follow\",\n });\n\n if (retry.ok) {\n stats.retry_success++;\n log(\"[ar] retry succeeded\");\n return finalize(retry, wantsStream, debug);\n }\n stats.retry_failed++;\n const retryText = await retry.text();\n return passthroughError(retry.status, retryText);\n } catch (e) {\n stats.retry_failed++;\n log(`[ar] retry error: ${(e as Error).message}`);\n }\n }\n\n return passthroughError(upstreamResponse.status, errorText);\n }\n\n return finalize(upstreamResponse, wantsStream, debug);\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────\n\nfunction buildHeaders(\n request: Request,\n opts: {\n upstream: string;\n client: ClientInfo;\n apiKey?: string;\n uaMode: \"opencode\" | \"auto\" | \"passthrough\";\n browserHeaders: boolean;\n },\n): Headers {\n const { upstream, client, apiKey, uaMode, browserHeaders } = opts;\n const headers = new Headers();\n\n // Forward everything meaningful the client sent (auth, anthropic-version,\n // x-api-key, content-type, custom beta flags…) minus hop-by-hop noise.\n for (const [key, value] of request.headers) {\n if (HOP_BY_HOP.has(key.toLowerCase())) continue;\n if (key.toLowerCase() === \"user-agent\") continue;\n headers.set(key, value);\n }\n\n // Identify ourselves upstream.\n const ua = uaMode === \"passthrough\"\n ? (client.incomingUa || DEFAULT_UA)\n : uaMode === \"auto\"\n ? UPSTREAM_UA[client.kind]\n : DEFAULT_UA;\n headers.set(\"User-Agent\", ua);\n\n // Tell the upstream (and our own logs) which agent this came from.\n headers.set(\"X-Client-Kind\", client.kind);\n if (client.version) headers.set(\"X-Client-Version\", client.version);\n\n headers.set(\"Host\", new URL(upstream).hostname);\n if (!headers.has(\"Accept\")) headers.set(\"Accept\", \"application/json\");\n if (!headers.has(\"Content-Type\") && request.method !== \"GET\") {\n headers.set(\"Content-Type\", \"application/json\");\n }\n\n // Fall back to a server-side key when the client didn't send one.\n if (!headers.has(\"Authorization\") && !headers.has(\"x-api-key\") && apiKey) {\n headers.set(\"Authorization\", `Bearer ${apiKey}`);\n }\n\n if (browserHeaders) {\n headers.set(\"Accept-Language\", \"en-US,en;q=0.9\");\n headers.set(\"Origin\", upstream);\n headers.set(\"Referer\", `${upstream}/`);\n headers.set(\"Sec-Fetch-Dest\", \"empty\");\n headers.set(\"Sec-Fetch-Mode\", \"cors\");\n headers.set(\"Sec-Fetch-Site\", \"same-origin\");\n }\n\n return headers;\n}\n\n/** Attach CORS + SSE filtering to a successful upstream response. */\nfunction finalize(\n upstream: Response,\n wantsStream: boolean,\n debug: boolean,\n): Response {\n const headers = new Headers(upstream.headers);\n for (const [k, v] of Object.entries(CORS)) headers.set(k, v);\n headers.delete(\"content-length\");\n headers.delete(\"content-encoding\");\n\n const contentType = upstream.headers.get(\"content-type\") ?? \"\";\n const isSse = contentType.includes(\"text/event-stream\") || wantsStream;\n\n if (!isSse || !upstream.body) {\n return new Response(upstream.body, { status: upstream.status, headers });\n }\n\n const filtered = upstream.body.pipeThrough(\n sseFilter({\n onDrop: () => stats.sse_lines_filtered++,\n debug: debug ? (m) => console.log(m) : undefined,\n }),\n );\n\n return new Response(filtered, { status: upstream.status, headers });\n}\n\nfunction passthroughError(status: number, text: string): Response {\n const headers = new Headers(CORS);\n headers.set(\n \"Content-Type\",\n text.trim().startsWith(\"{\") ? \"application/json\" : \"text/plain\",\n );\n return new Response(text, { status, headers });\n}\n\nfunction logBlocked(body: string, errorText: string): void {\n const { model, messageCount, lastUserMessage } = summarizeBody(body);\n const preview = lastUserMessage.length > 300\n ? lastUserMessage.slice(0, 300) + \"...\"\n : lastUserMessage;\n\n console.warn(\n \"[ar] BLOCKED CONTENT\\n\" +\n `[ar] model: ${model}\\n` +\n `[ar] messages: ${messageCount}\\n` +\n `[ar] last user msg: ${preview}\\n` +\n `[ar] upstream: ${errorText.slice(0, 200)}`,\n );\n}\n",[],[77,113],"ad1fa059-92ea-4264-a17e-a3e56c2c0de1","clients.ts","d563418a-8da2-11f1-a959-1607ee4eb77e",["D",1785586592933],"// Client/agent detection — figures out which coding agent is calling us\n// (Claude Code, OpenCode, Cursor, raw SDK, curl, browser) so we can present\n// the right identity upstream and keep per-client stats.\n\nexport type ClientKind =\n | \"claude-code\"\n | \"opencode\"\n | \"cursor\"\n | \"anthropic-sdk\"\n | \"openai-sdk\"\n | \"curl\"\n | \"browser\"\n | \"unknown\";\n\n/** API dialect the client is speaking — decides how we inject the preamble. */\nexport type ApiFlavor = \"openai\" | \"anthropic\";\n\nexport interface ClientInfo {\n kind: ClientKind;\n flavor: ApiFlavor;\n /** Raw incoming User-Agent, for logging. */\n incomingUa: string;\n /** Version parsed out of the UA when present, e.g. \"1.17.12\". */\n version: string | null;\n}\n\n/**\n * User-Agent we send upstream per client.\n * AgentRouter gates on client identity, and `opencode/1.17.12` is the\n * known-accepted value — so that's the default for everything. Change\n * `uaMode` to \"auto\" in the config if you want per-client UAs instead.\n */\nexport const UPSTREAM_UA: Record = {\n \"claude-code\": \"claude-cli/1.0.60 (external, cli)\",\n \"opencode\": \"opencode/1.17.12\",\n \"cursor\": \"Cursor/0.42.0\",\n \"anthropic-sdk\": \"anthropic-sdk-typescript/0.30.0\",\n \"openai-sdk\": \"OpenAI/NodeJS/4.68.0\",\n \"curl\": \"opencode/1.17.12\",\n \"browser\": \"opencode/1.17.12\",\n \"unknown\": \"opencode/1.17.12\",\n};\n\n/** The UA AgentRouter is known to accept. */\nexport const DEFAULT_UA = \"opencode/1.17.12\";\n\nexport function detectClient(request: Request, pathname: string): ClientInfo {\n const ua = request.headers.get(\"User-Agent\") ?? \"\";\n const lower = ua.toLowerCase();\n const h = request.headers;\n\n // Anthropic dialect is signalled by the path or by SDK-specific headers.\n const anthropicHeaders = h.has(\"anthropic-version\") || h.has(\"x-api-key\") ||\n h.has(\"anthropic-beta\");\n const flavor: ApiFlavor =\n pathname.includes(\"/messages\") || anthropicHeaders ? \"anthropic\" : \"openai\";\n\n let kind: ClientKind = \"unknown\";\n\n if (lower.includes(\"claude-cli\") || lower.includes(\"claude-code\")) {\n kind = \"claude-code\";\n } else if (h.get(\"x-app\") === \"cli\" && anthropicHeaders) {\n // Claude Code sends `x-app: cli` alongside anthropic-version.\n kind = \"claude-code\";\n } else if (lower.includes(\"opencode\")) {\n kind = \"opencode\";\n } else if (lower.includes(\"cursor\")) {\n kind = \"cursor\";\n } else if (lower.includes(\"anthropic\")) {\n kind = \"anthropic-sdk\";\n } else if (lower.includes(\"openai\") || lower.includes(\"node-fetch\")) {\n kind = \"openai-sdk\";\n } else if (lower.includes(\"curl\") || lower.includes(\"httpie\")) {\n kind = \"curl\";\n } else if (lower.includes(\"mozilla\")) {\n kind = \"browser\";\n } else if (anthropicHeaders) {\n kind = \"anthropic-sdk\";\n }\n\n const m = ua.match(/(\\d+\\.\\d+(?:\\.\\d+)?)/);\n\n return { kind, flavor, incomingUa: ua, version: m ? m[1] : null };\n}\n",[],[77,121],"d3f7df8b-6571-47f9-b59f-68d2d489736d","body.ts","e414a3a4-8da2-11f1-a841-1607ee4eb77e",9,["D",1785586617586],"// Request-body transforms: null stripping, preamble injection (OpenAI +\n// Anthropic dialects), context trimming for content-block retries.\n\nimport type { ApiFlavor } from \"./clients.ts\";\n\nexport const EDUCATION_PREAMBLE =\n \"This conversation is part of an educational language-learning application \" +\n \"for studying Mandarin Chinese. All Chinese characters (Hanzi), Pinyin, \" +\n \"vocabulary lists, and textbook excerpts are standard pedagogical material. \" +\n \"Please process them normally.\";\n\n/**\n * Remove null-valued fields recursively. The AI SDK sends\n * `response_format: null` etc., which AgentRouter rejects with\n * 400 \"expected object, received null\".\n */\nexport function stripNullValues(obj: any): any {\n if (Array.isArray(obj)) return obj.map(stripNullValues);\n if (obj !== null && typeof obj === \"object\") {\n return Object.fromEntries(\n Object.entries(obj)\n .filter(([_, v]) => v !== null)\n .map(([k, v]) => [k, stripNullValues(v)]),\n );\n }\n return obj;\n}\n\n/** Inject the educational preamble, respecting the client's API dialect. */\nexport function injectSystemPreamble(obj: any, flavor: ApiFlavor): any {\n if (typeof obj !== \"object\" || obj === null) return obj;\n\n if (flavor === \"anthropic\") return injectAnthropic(obj);\n return injectOpenAi(obj);\n}\n\n// OpenAI: system lives in messages[] as { role: \"system\", content }\nfunction injectOpenAi(obj: any): any {\n if (!Array.isArray(obj.messages)) return obj;\n const messages: any[] = obj.messages;\n\n for (const msg of messages) {\n if (msg?.role === \"system\") {\n if (\n typeof msg.content === \"string\" &&\n !msg.content.includes(EDUCATION_PREAMBLE)\n ) {\n msg.content = `${EDUCATION_PREAMBLE}\\n\\n${msg.content}`;\n } else if (Array.isArray(msg.content)) {\n prependToBlocks(msg.content);\n }\n return obj;\n }\n }\n\n messages.unshift({ role: \"system\", content: EDUCATION_PREAMBLE });\n return obj;\n}\n\n// Anthropic: system is a top-level string or array of text blocks\nfunction injectAnthropic(obj: any): any {\n if (typeof obj.system === \"string\") {\n if (!obj.system.includes(EDUCATION_PREAMBLE)) {\n obj.system = `${EDUCATION_PREAMBLE}\\n\\n${obj.system}`;\n }\n return obj;\n }\n if (Array.isArray(obj.system)) {\n prependToBlocks(obj.system);\n return obj;\n }\n obj.system = EDUCATION_PREAMBLE;\n return obj;\n}\n\nfunction prependToBlocks(blocks: any[]): void {\n const first = blocks.find((b) => b?.type === \"text\");\n if (first && typeof first.text === \"string\") {\n if (!first.text.includes(EDUCATION_PREAMBLE)) {\n first.text = `${EDUCATION_PREAMBLE}\\n\\n${first.text}`;\n }\n } else {\n blocks.unshift({ type: \"text\", text: EDUCATION_PREAMBLE });\n }\n}\n\n/**\n * Trim conversation context down to system message(s) + the last user turn.\n * Used to retry after a content-block: we lose history, but that beats\n * being stuck on a poisoned conversation.\n */\nexport function trimContextForRetry(obj: any, flavor: ApiFlavor): any {\n if (typeof obj !== \"object\" || obj === null) return obj;\n if (!Array.isArray(obj.messages)) return obj;\n\n const messages: any[] = obj.messages;\n const kept: any[] = [];\n\n // Anthropic keeps system separately, so only OpenAI needs system carried over.\n if (flavor === \"openai\") {\n for (const m of messages) if (m?.role === \"system\") kept.push(m);\n }\n\n for (let i = messages.length - 1; i >= 0; i--) {\n if (messages[i]?.role === \"user\") {\n kept.push(messages[i]);\n break;\n }\n }\n\n return { ...obj, messages: kept };\n}\n\n/** Heuristic: did the upstream reject us for content reasons? */\nexport function looksContentBlocked(status: number, body: string): boolean {\n if (status !== 400 && status !== 403 && status !== 451) return false;\n const b = body.toLowerCase();\n return (\n b.includes(\"content_blocked\") ||\n b.includes(\"content block\") ||\n b.includes(\"content-blocked\") ||\n b.includes(\"content_filter\") ||\n b.includes(\"content policy\") ||\n b.includes(\"flagged\") ||\n b.includes(\"risk\") ||\n b.includes(\"违规\") ||\n b.includes(\"敏感\")\n );\n}\n\n/** Pull a short summary out of a request body for logging blocked content. */\nexport function summarizeBody(text: string): {\n model: string;\n messageCount: number;\n lastUserMessage: string;\n} {\n let model = \"unknown\";\n let messageCount = 0;\n let lastUserMessage = \"(no user message found)\";\n\n try {\n const obj = JSON.parse(text);\n model = obj?.model ?? \"unknown\";\n const messages: any[] = Array.isArray(obj?.messages) ? obj.messages : [];\n messageCount = messages.length;\n\n for (let i = messages.length - 1; i >= 0; i--) {\n const msg = messages[i];\n if (msg?.role !== \"user\") continue;\n const c = msg.content;\n if (typeof c === \"string\") {\n lastUserMessage = c;\n } else if (Array.isArray(c)) {\n lastUserMessage = c\n .map((p: any) =>\n p?.type === \"text\" ? (p.text ?? \"\") : `[${p?.type ?? \"unknown\"}]`\n )\n .join(\" \");\n }\n break;\n }\n } catch {\n // leave defaults\n }\n\n return { model, messageCount, lastUserMessage };\n}\n",[],[77,128],"75ce6b83-5726-4b00-9e49-bd0ca73f908a",["D",1785579374086],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","6e433403-b340-48f0-ba92-67756bcd2aff","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019fbcc6-9fb1-700e-93b4-5fbff4e14082","tursoName","75ce6b8357264b009e49bd0ca73f908a","tursoHostname","75ce6b8357264b009e49bd0ca73f908a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789474235934],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_189":19},"org",{"_11":12,"_184":19,"_185":19,"_144":145,"_186":187,"_188":56},"branch",{"_17":71,"_13":16,"_36":43,"_176":135,"_177":-5,"_178":-5,"_179":-5,"_180":-5,"_181":-5,"_182":14,"_183":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":135,"_13":14,"_48":249,"_137":-5,"_138":56,"_139":140,"_141":140,"_142":19,"_143":-5,"_144":145,"_146":61,"_147":47,"_148":-5,"_149":-5,"_150":73,"_151":152,"_153":154,"_155":156,"_157":250,"_159":-5,"_160":161,"_162":161,"_163":164,"_165":164,"_166":164,"_167":161,"_168":161,"_169":251,"_171":252,"_173":253,"_175":56},[225,230,231,232],"files",[225,226,227,228,229,230,231,232],"counts",{"_216":73,"_217":50,"_218":73,"_31":219,"_220":221},[208,209,210,211],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_36":76,"_13":77,"_39":78,"_41":-5,"_42":43,"_44":79,"_46":47,"_48":80,"_17":73,"_51":81,"_53":-5,"_55":56,"_57":-5,"_18":215},{"_36":68,"_13":69,"_39":70,"_41":-5,"_42":43,"_44":71,"_46":47,"_48":72,"_17":73,"_51":24,"_53":74,"_55":56,"_57":-5,"_18":214},{"_36":59,"_13":60,"_39":61,"_41":-5,"_42":43,"_44":62,"_46":47,"_48":63,"_17":64,"_51":65,"_53":66,"_55":56,"_57":14,"_18":213},{"_36":37,"_13":38,"_39":40,"_41":-5,"_42":43,"_44":45,"_46":47,"_48":49,"_17":50,"_51":52,"_53":54,"_55":56,"_57":-5,"_18":212},[38],[60],[69],[77],"pulls","branches","forks",{"_222":73,"_224":73},"connections",{"_222":73,"_223":73},"count","unfilledCount","emptyCount",{"_36":76,"_13":77,"_39":78,"_41":-5,"_42":43,"_44":79,"_46":47,"_48":97,"_17":73,"_51":81,"_53":-5,"_55":56,"_57":-5,"_88":247,"_18":248},{"_36":127,"_13":128,"_39":129,"_41":78,"_42":43,"_44":130,"_46":47,"_48":131,"_17":73,"_51":52,"_53":132,"_55":56,"_57":-5,"_88":245,"_18":246},{"_36":120,"_13":121,"_39":122,"_41":78,"_42":43,"_44":79,"_46":47,"_48":123,"_17":73,"_51":52,"_53":124,"_55":56,"_57":-5,"_88":243,"_18":244},{"_36":112,"_13":113,"_39":114,"_41":78,"_42":43,"_44":115,"_46":47,"_48":116,"_17":73,"_51":52,"_53":117,"_55":56,"_57":-5,"_88":241,"_18":242},{"_36":104,"_13":105,"_39":106,"_41":78,"_42":43,"_44":107,"_46":47,"_48":108,"_17":73,"_51":52,"_53":109,"_55":56,"_57":-5,"_88":239,"_18":240},{"_36":68,"_13":69,"_39":70,"_41":-5,"_42":43,"_44":71,"_46":47,"_48":94,"_17":73,"_51":24,"_53":74,"_55":56,"_57":-5,"_88":237,"_18":238},{"_36":59,"_13":60,"_39":61,"_41":-5,"_42":43,"_44":62,"_46":47,"_48":91,"_17":64,"_51":65,"_53":66,"_55":56,"_57":14,"_88":235,"_18":236},{"_36":37,"_13":38,"_39":40,"_41":-5,"_42":43,"_44":45,"_46":47,"_48":87,"_17":50,"_51":52,"_53":54,"_55":56,"_57":-5,"_88":233,"_18":234},[],[38],[],[60],[],[69],[],[77,105],[],[77,113],[],[77,121],[],[77,128],[226,227,228,229],[77],["D",1785579374086],["D",1789474235934],{"_11":12,"_189":19},{"_11":12,"_184":19,"_185":19,"_144":145,"_186":187,"_188":56},{"_17":71,"_13":16,"_36":43,"_176":135,"_177":-5,"_178":-5,"_179":-5,"_180":-5,"_181":-5,"_182":14,"_183":12},"ctx",{"_169":-5,"_205":287,"_288":289,"_290":291,"_292":56,"_293":56,"_294":56,"_295":47,"_296":-5,"_297":-7,"_298":-7,"_299":73,"_300":56,"_301":56,"_302":-5,"_303":56,"_304":56,"_305":56,"_306":-5},"ENV",{"_258":259,"_260":261,"_262":16,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]