wehub-resource-sync
84 lines
3.4 KiB
TypeScript
84 lines
3.4 KiB
TypeScript
import { FORMATS } from "../../translator/formats.ts";
|
|
import { isClaudeCodeCompatibleProvider } from "../../services/claudeCodeCompatible.ts";
|
|
import { getHeaderValueCaseInsensitive } from "./headers.ts";
|
|
|
|
export function shouldUseNativeCodexPassthrough({
|
|
provider,
|
|
sourceFormat,
|
|
endpointPath,
|
|
}: {
|
|
provider?: string | null;
|
|
sourceFormat?: string | null;
|
|
endpointPath?: string | null;
|
|
}): boolean {
|
|
if (provider !== "codex") return false;
|
|
if (sourceFormat !== FORMATS.OPENAI_RESPONSES) return false;
|
|
let normalizedEndpoint = String(endpointPath || "");
|
|
while (normalizedEndpoint.endsWith("/")) normalizedEndpoint = normalizedEndpoint.slice(0, -1);
|
|
const segments = normalizedEndpoint.split("/");
|
|
return segments.includes("responses");
|
|
}
|
|
|
|
/**
|
|
* Pass `thinking` / `redacted_thinking` blocks through UNCHANGED.
|
|
*
|
|
* This used to rewrite every assistant thinking block to `redacted_thinking`
|
|
* carrying a synthetic signature, on the assumption that a thinking signature is
|
|
* bound to the auth token that produced it and would be rejected after a token /
|
|
* model switch with 400 "Invalid signature in thinking block" (issue #2454).
|
|
*
|
|
* That rewrite is the actual cause of a different, far more common failure on the
|
|
* Anthropic-native Claude OAuth passthrough:
|
|
*
|
|
* 400 messages.N.content.M: `thinking` or `redacted_thinking` blocks in the
|
|
* latest assistant message cannot be modified. These blocks must remain as
|
|
* they were in the original response.
|
|
*
|
|
* The Messages API validates submitted thinking blocks against the original
|
|
* response and rejects ANY modification — so converting them to
|
|
* `redacted_thinking` makes every multi-turn request with thinking fail (most
|
|
* visible on long Claude Code tool-loops). The thinking-block signature is
|
|
* validated server-side by Anthropic and stays valid when the blocks are replayed,
|
|
* including under a different OAuth token — verified by preserving the blocks
|
|
* across a mid-conversation account switch with zero "Invalid signature"
|
|
* responses. The redaction is therefore both unnecessary and the cause of the
|
|
* regression, so the blocks are now returned verbatim. The `signature` parameter
|
|
* is kept for call-site compatibility.
|
|
*/
|
|
export function redactPassthroughThinkingSignatures(
|
|
messages: unknown,
|
|
_signature: string
|
|
): unknown {
|
|
return messages;
|
|
}
|
|
|
|
export function isClaudeCodeSemanticPassthroughRequest({
|
|
provider,
|
|
sourceFormat,
|
|
targetFormat,
|
|
headers,
|
|
userAgent,
|
|
}: {
|
|
provider?: string | null;
|
|
sourceFormat?: string | null;
|
|
targetFormat?: string | null;
|
|
headers?: Record<string, unknown> | Headers | null;
|
|
userAgent?: string | null;
|
|
}): boolean {
|
|
const isDirectClaudeCodeProvider =
|
|
provider === "claude" || isClaudeCodeCompatibleProvider(provider);
|
|
if (!isDirectClaudeCodeProvider) return false;
|
|
if (sourceFormat !== FORMATS.CLAUDE) return false;
|
|
if (targetFormat !== FORMATS.CLAUDE) return false;
|
|
|
|
const headerUserAgent = getHeaderValueCaseInsensitive(headers, "user-agent");
|
|
const ua = `${userAgent || ""} ${headerUserAgent || ""}`.toLowerCase();
|
|
if (ua.includes("claude-code") || ua.includes("claude-cli")) return true;
|
|
|
|
const appHeader = getHeaderValueCaseInsensitive(headers, "x-app");
|
|
if (typeof appHeader === "string" && appHeader.trim().toLowerCase() === "cli") return true;
|
|
|
|
const sessionId = getHeaderValueCaseInsensitive(headers, "x-claude-code-session-id");
|
|
return typeof sessionId === "string" && sessionId.trim().length > 0;
|
|
}
|