mirror of
https://github.com/farion1231/cc-switch.git
synced 2026-10-25 17:22:27 +08:00
Jason
2185498e88
Common config snippet (Claude Code): - Treat custom request headers (`*_CUSTOM_HEADERS`, `HEADERS`) and any key containing COOKIE or AUTHORIZATION as credentials. Header names in general stay shareable (CLAUDE_CODE_ATTRIBUTION_HEADER, OTEL_EXPORTER_OTLP_HEADERS). - Never share key fields: all ANTHROPIC_* settings, the protocol selectors (CLAUDE_CODE_USE_BEDROCK/VERTEX/...), AWS_* and Vertex regions, and top-level model/apiKeyHelper/fallbackModel. Switching from Bedrock to the official provider no longer keeps Claude Code on Bedrock, and a /model choice no longer follows every switch. - Entries an existing snippet already shared are stripped from the current provider's row on its next switch-away, so they cannot get stuck in the wrong provider. A provider carrying AWS or Google credentials keeps that family's selectors and regions. Live files holding keys are now written owner-only (0600): Codex auth.json and config.toml, Claude Code settings.json and Grok Build config.toml. New files used to follow the umask (0644). Presets: - E-FlowCode and PIPELLM no longer ship personal preferences; Codex E-FlowCode drops `personality`. - AWS Bedrock (API Key) stores the key in env.AWS_BEARER_TOKEN_BEDROCK, which Claude Code reads. The key field and the proxy read it too; existing rows with a top-level apiKey keep working and are edited in place. - A preset scan keeps preference keys out of Claude and Codex presets. Remove dead code only reached from tests: ProxyService::start_with_takeover and its helpers, and the ConfigService sync_current_providers_to_live family. Behavior changes: ANTHROPIC_* settings such as ANTHROPIC_LOG are no longer shared; a Bedrock or Vertex provider whose selectors only lived in the shared snippet may need them re-entered once.
48 lines
1.9 KiB
TypeScript
48 lines
1.9 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import { parse as parseToml } from "smol-toml";
|
|
import { providerPresets } from "@/config/claudeProviderPresets";
|
|
import { codexProviderPresets } from "@/config/codexProviderPresets";
|
|
|
|
// 预设只描述上游：地址、鉴权、模型和上游兼容选项。插件、署名、推理档位这类
|
|
// 个人偏好不属于供应商，写进预设会在切换时覆盖用户自己的设置（E-FlowCode 曾把
|
|
// enabledPlugins 整张覆盖掉用户的插件表）。
|
|
|
|
describe("Claude presets carry no personal preferences", () => {
|
|
// Claude Code settings.json 的顶层键除 env 外都是用户偏好（permissions、hooks、
|
|
// enabledPlugins、includeCoAuthoredBy……）；顶层 apiKey Claude Code 不读。
|
|
it.each(providerPresets.map((preset) => [preset.name, preset] as const))(
|
|
"%s only sets env",
|
|
(_name, preset) => {
|
|
expect(Object.keys(preset.settingsConfig as object)).toEqual(["env"]);
|
|
},
|
|
);
|
|
});
|
|
|
|
describe("Codex presets carry no personal preferences", () => {
|
|
// 顶层只允许模型、协议相关的键；personality、approval_policy、sandbox_mode、
|
|
// notify、tui 这类偏好一律不进预设。model_context_window /
|
|
// model_auto_compact_token_limit 是跟上游走的窗口键，预留给顶层。
|
|
const allowedTopLevelKeys = new Set([
|
|
"model_provider",
|
|
"model",
|
|
"model_reasoning_effort",
|
|
"disable_response_storage",
|
|
"review_model",
|
|
"model_verbosity",
|
|
"model_context_window",
|
|
"model_auto_compact_token_limit",
|
|
"model_providers",
|
|
]);
|
|
|
|
it.each(codexProviderPresets.map((preset) => [preset.name, preset] as const))(
|
|
"%s only sets upstream keys at the top level",
|
|
(_name, preset) => {
|
|
const config = parseToml(preset.config ?? "");
|
|
const unexpected = Object.keys(config).filter(
|
|
(key) => !allowedTopLevelKeys.has(key),
|
|
);
|
|
expect(unexpected).toEqual([]);
|
|
},
|
|
);
|
|
});
|