feat(proxy): add --openai-api-target and --anthropic-api-target flags by Claude · Pull Request #1249 · github/gh-aw-firewall

Claude · 2026-03-12T00:16:57Z

Add --openai-api-target and --anthropic-api-target CLI flags to configure custom upstream API endpoints in the api-proxy, enabling AWF to work with internal LLM routers, Azure OpenAI, and other custom OpenAI-compatible endpoints instead of the hardcoded api.openai.com/api.anthropic.com defaults.

Changes Made

src/cli.ts: Added --openai-api-target and --anthropic-api-target CLI flags with OPENAI_API_TARGET/ANTHROPIC_API_TARGET env var fallback; added validateApiTargetInAllowedDomains() that warns at startup when a custom target is not covered by --allow-domains; extracted DEFAULT_OPENAI_API_TARGET and DEFAULT_ANTHROPIC_API_TARGET constants
src/types.ts: Added openaiApiTarget and anthropicApiTarget optional fields to WrapperConfig
src/docker-manager.ts: Passes OPENAI_API_TARGET and ANTHROPIC_API_TARGET environment variables to the api-proxy container with debug logging
containers/api-proxy/server.js: Reads configurable upstream targets from environment variables, falling back to the default public endpoints when not set; startup log now includes the active target hostname
src/cli.test.ts: Added unit tests for validateApiTargetInAllowedDomains and the default target constants
docs/api-proxy-sidecar.md: Documented --openai-api-target, --anthropic-api-target, and --copilot-api-target in the Configuration reference section, including the requirement to add custom targets to --allow-domains

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

lpcox · 2026-03-12T00:17:16Z

@copilot fix the pr title and summary

Copilot · 2026-03-12T00:19:18Z

@copilot fix the pr title and summary

Updated the PR description with a proper summary. The PR title should be updated to feat(proxy): add --openai-api-target and --anthropic-api-target flags to follow the conventional commits format — I don't have a tool to update the title directly.

github-actions · 2026-03-12T00:19:25Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	82.42%	82.50%	📈 +0.08%
Statements	82.42%	82.49%	📈 +0.07%
Functions	82.77%	82.77%	➡️ +0.00%
Branches	74.82%	74.48%	📉 -0.34%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
`src/docker-manager.ts`	84.0% → 84.3% (+0.29%)	83.3% → 83.6% (+0.29%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions · 2026-03-12T00:23:09Z

PR titles:
feat(cli): add --memory-limit flag for configurable container memory
test: expand credential hiding tests to all 14 protected paths
GitHub MCP review ✅ | safeinputs-gh ✅
Playwright ✅ | Tavily search ❌
File write ✅ | cat verify ✅
Discussion comment ✅ | build ✅
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex for issue #1249

github-actions · 2026-03-12T00:23:15Z

Smoke Test Results

Recent merged PRs:

feat(cli): add --memory-limit flag for configurable container memory #1243: feat(cli): add --memory-limit flag for configurable container memory
test(docker): verify capsh execution chain after PR #715 #1240: test(docker): verify capsh execution chain after PR fix: eliminate nested bash layer in chroot command execution for Java/.NET #715

Test	Result
GitHub MCP (list PRs)	✅
Playwright (github.com title)	✅
File write	✅
Bash verify	✅

Overall: PASS

💥 [THE END] — Illustrated by Smoke Claude for issue #1249

github-actions · 2026-03-12T00:24:32Z

Chroot Version Comparison Results

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.12	Python 3.12.3	❌ NO
Node.js	v24.14.0	v20.20.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Overall: ❌ Not all tests passed — Python and Node.js versions differ between host and chroot environment.

Tested by Smoke Chroot for issue #1249

github-actions · 2026-03-12T00:28:09Z

Smoke test results for run 22980663938:

✅ GitHub MCP — last 2 merged PRs: #1243 feat(cli): add --memory-limit flag | #1240 test(docker): verify capsh execution chain (both by @Mossaka)
✅ Playwright — github.com title contains "GitHub"
✅ File write — /tmp/gh-aw/agent/smoke-test-copilot-22980663938.txt created
✅ Bash — file read back successfully

Overall: PASS

📰 BREAKING: Report filed by Smoke Copilot for issue #1249

Copilot

Pull request overview

This PR adds two new CLI flags (--openai-api-target and --anthropic-api-target) to configure custom upstream API endpoints for the api-proxy sidecar, enabling AWF to work with internal LLM routers, Azure OpenAI, and other OpenAI/Anthropic-compatible endpoints instead of the hardcoded defaults.

Changes:

Added --openai-api-target and --anthropic-api-target CLI flags and corresponding WrapperConfig fields, following the existing --copilot-api-target pattern.
Passes the new target values as OPENAI_API_TARGET / ANTHROPIC_API_TARGET environment variables to the api-proxy container.
Updated server.js to read these env vars (with defaults to api.openai.com / api.anthropic.com) and use them in all proxyRequest calls.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
`src/types.ts`	Added `openaiApiTarget` and `anthropicApiTarget` optional fields to `WrapperConfig` with documentation
`src/cli.ts`	Added CLI flag definitions and wiring of options/env vars into config
`src/docker-manager.ts`	Passes new target env vars to api-proxy container and adds debug logging
`containers/api-proxy/server.js`	Reads configurable targets from env vars and uses them in proxy routing and startup logging

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

src/cli.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

github-actions · 2026-03-12T01:10:12Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	82.42%	82.50%	📈 +0.08%
Statements	82.42%	82.49%	📈 +0.07%
Functions	82.77%	82.77%	➡️ +0.00%
Branches	74.82%	74.48%	📉 -0.34%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
`src/docker-manager.ts`	84.0% → 84.3% (+0.29%)	83.3% → 83.6% (+0.29%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

github-actions · 2026-03-12T01:14:02Z

Smoke test results for run 22982054129

✅ GitHub MCP: Last 2 merged PRs — #1243: feat(cli): add --memory-limit flag by @Mossaka | #1240: test(docker): verify capsh execution chain by @Mossaka
✅ Playwright: github.com title contains "GitHub"
✅ File write: /tmp/gh-aw/agent/smoke-test-copilot-22982054129.txt created and verified
✅ Bash: file content confirmed

Overall: PASS

📰 BREAKING: Report filed by Smoke Copilot for issue #1249

github-actions · 2026-03-12T01:14:40Z

PR titles: feat(cli): add --memory-limit flag for configurable container memory | test: expand credential hiding tests to all 14 protected paths
GitHub MCP review: ✅
safeinputs-gh PR list: ✅
Playwright title check: ✅
Tavily search: ❌ (tool unavailable)
File write+cat: ✅
Discussion query+comment: ✅
Build: ✅
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex for issue #1249

github-actions · 2026-03-12T03:12:33Z

Chroot Version Comparison Results

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.12	Python 3.12.3	❌ NO
Node.js	v24.14.0	v20.20.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Result: FAILED — Python and Node.js versions differ between host and chroot environments.

Tested by Smoke Chroot for issue #1249

…t coverage for API target validation (#1251) * Initial plan * fix: resolve failing Build and Lint (Node 22) CI workflow Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

github-actions · 2026-03-12T03:24:31Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	82.42%	82.32%	📉 -0.10%
Statements	82.42%	82.32%	📉 -0.10%
Functions	82.77%	82.93%	📈 +0.16%
Branches	74.82%	74.03%	📉 -0.79%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/docker-manager.ts`	84.0% → 84.3% (+0.29%)	83.3% → 83.6% (+0.29%)
`src/cli.ts`	47.8% → 48.2% (+0.45%)	48.1% → 48.7% (+0.55%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions · 2026-03-12T03:27:39Z

Smoke Test Results

✅ GitHub MCP: fix: resolve pid-tracker integration test failure and add missing test coverage for API target validation #1251 fix: resolve pid-tracker..., fix(ci): skip agentic workflow activation for bot-triggered pull requests #1250 fix(ci): skip agentic workflow activation...
✅ Playwright: GitHub page title contains "GitHub"
✅ File write: /tmp/gh-aw/agent/smoke-test-claude-22985143162.txt created
✅ Bash: File contents verified

Overall: PASS

💥 [THE END] — Illustrated by Smoke Claude for issue #1249

github-actions · 2026-03-12T03:28:23Z

Smoke Test Results

✅ GitHub MCP — Last 2 merged PRs:

fix: resolve pid-tracker integration test failure and add missing test coverage for API target validation #1251 fix: resolve pid-tracker integration test failure and add missing test coverage for API target validation
fix(ci): skip agentic workflow activation for bot-triggered pull requests #1250 fix(ci): skip agentic workflow activation for bot-triggered pull requests

✅ Playwright — github.com title contains "GitHub"
✅ File Writing — /tmp/gh-aw/agent/smoke-test-copilot-22985143129.txt created
✅ Bash — File verified via cat

Overall: PASS

Author: @lpcox

📰 BREAKING: Report filed by Smoke Copilot for issue #1249

github-actions · 2026-03-12T03:29:37Z

Smoke test summary
PR: fix: resolve pid-tracker integration test failure and add missing test coverage for API target validation
PR: fix(ci): skip agentic workflow activation for bot-triggered pull requests
Tests: 1✅ 2✅ 3✅ 4❌ 5✅ 6✅ 7✅ 8✅
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex for issue #1249

…bs (#1252) * Initial plan * fix(ci): remove unused Setup Scripts step from update_cache_memory jobs Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

lpcox · 2026-03-12T03:36:35Z

@copilot fix the pr title and summary

…in api-proxy-sidecar.md Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

…1254) * Initial plan * fix: resolve coverage regression and locked PR comment failure Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

github-actions · 2026-03-12T14:04:18Z

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	82.42%	82.70%	📈 +0.28%
Statements	82.42%	82.70%	📈 +0.28%
Functions	82.77%	83.01%	📈 +0.24%
Branches	74.82%	75.20%	📈 +0.38%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/docker-manager.ts`	84.0% → 84.6% (+0.65%)	83.3% → 83.9% (+0.63%)
`src/cli.ts`	47.8% → 49.9% (+2.12%)	48.1% → 50.5% (+2.31%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions · 2026-03-12T14:07:59Z

Smoke Test Results

✅ GitHub MCP: fix: resolve test coverage regression and locked PR comment failure #1254 fix: resolve test coverage regression and locked PR comment failure; feat: add --openai-api-target and --anthropic-api-target flags for custom LLM endpoints #1247 feat: add --openai-api-target and --anthropic-api-target flags
✅ Playwright: github.com title contains "GitHub"
✅ File write: /tmp/gh-aw/agent/smoke-test-claude-23005850196.txt created
✅ Bash verify: file contents confirmed

Overall: PASS

💥 [THE END] — Illustrated by Smoke Claude for issue #1249

github-actions · 2026-03-12T14:08:13Z

Smoke test results for run 23005850164:

✅ GitHub MCP — Last 2 merged PRs: #1254 "fix: resolve test coverage regression and locked PR comment failure", #1252 "fix(ci): remove unused Setup Scripts step from update_cache_memory jobs"
✅ Playwright — github.com title contains "GitHub"
✅ File Write — /tmp/gh-aw/agent/smoke-test-copilot-23005850164.txt created
✅ Bash — File verified via cat

Overall: PASS | PR author: @Copilot | Assignees: @lpcox @Copilot

📰 BREAKING: Report filed by Smoke Copilot for issue #1249

github-actions · 2026-03-12T14:08:28Z

PR titles: fix: resolve test coverage regression and locked PR comment failure; fix(ci): remove unused Setup Scripts step from update_cache_memory jobs; feat(proxy): add --openai-api-target and --anthropic-api-target flags; fix(docker): simplify security model - remove direct DNS exceptions
GitHub MCP merged PR review: ✅
safeinputs-gh pr list: ✅
Playwright title contains GitHub: ✅
Tavily search: ❌ (tool unavailable)
File write: ✅
Bash cat verify: ✅
Discussion comment: ✅
Build (npm ci && npm run build): ✅
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex for issue #1249

github-actions · 2026-03-12T14:09:14Z

Chroot Version Comparison Results

Runtime	Host Version	Chroot Version	Match?
Python	`Python 3.12.12`	`Python 3.12.3`	❌ NO
Node.js	`v24.14.0`	`v20.20.0`	❌ NO
Go	`go1.22.12`	`go1.22.12`	✅ YES

Overall result: ❌ FAILED — Python and Node.js versions differ between host and chroot environments.

Tested by Smoke Chroot for issue #1249

github-actions · 2026-03-12T14:11:44Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	passed	✅ PASS
Go	env	✅	passed	✅ PASS
Go	uuid	✅	passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #1249 · ◷

Claude AI added 2 commits March 12, 2026 00:08

Initial plan

61f74b9

feat: add openai/anthropic api target flags for custom endpoints

f70ed33

Claude AI assigned Claude and lpcox Mar 12, 2026

Copilot started work on behalf of lpcox March 12, 2026 00:17 View session

Copilot AI changed the title ~~Completing task~~ feat(proxy): add --openai-api-target and --anthropic-api-target flags Mar 12, 2026

Copilot finished work on behalf of lpcox March 12, 2026 00:19

github-actions bot added the smoke-claude label Mar 12, 2026

github-actions bot mentioned this pull request Mar 12, 2026

[agentics] No-Op Runs #1086

Closed

github-actions bot added the build-test label Mar 12, 2026

This comment has been minimized.

Sign in to view

github-actions bot added the smoke-copilot label Mar 12, 2026

lpcox marked this pull request as ready for review March 12, 2026 01:03

Copilot AI review requested due to automatic review settings March 12, 2026 01:03

Copilot started reviewing on behalf of lpcox March 12, 2026 01:04 View session

Copilot AI reviewed Mar 12, 2026

View reviewed changes

src/cli.ts Show resolved Hide resolved

src/cli.ts Show resolved Hide resolved

Copilot started work on behalf of lpcox March 12, 2026 01:08 View session

Update src/cli.ts

1a1c943

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

fix(proxy): warn when custom api targets are not in --allow-domains

28493be

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox March 12, 2026 01:14

github deleted a comment Mar 12, 2026

github locked as spam and limited conversation to collaborators Mar 12, 2026

github deleted a comment Mar 12, 2026

Copilot started work on behalf of lpcox March 12, 2026 03:36 View session

docs(proxy): document --openai-api-target and --anthropic-api-target …

5c209b8

…in api-proxy-sidecar.md Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox March 12, 2026 03:39

Claude AI mentioned this pull request Mar 12, 2026

feat: support custom OpenAI and Anthropic API targets in AWF sandbox github/gh-aw#20631

Merged

Rubyj mentioned this pull request Mar 12, 2026

feat: add --openai-api-target and --anthropic-api-target flags for custom LLM endpoints #1247

Closed

github unlocked this conversation Mar 12, 2026

lpcox merged commit 0aff975 into main Mar 12, 2026
60 checks passed

lpcox deleted the claude/fix-issue-20590 branch March 12, 2026 14:36

This was referenced Mar 12, 2026

fix: use docker cp instead of file bind mounts for DinD compatibility #1079

Merged

fix: make release workflow compatible with branch protection #1260

Merged

ci: skip CI when only release.yml changes #1261

Merged

Conversation

Claude AI commented Mar 12, 2026 • edited by Copilot AI Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes Made

Uh oh!

lpcox commented Mar 12, 2026

Uh oh!

Copilot AI commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Mar 12, 2026

Chroot Version Comparison Results

Uh oh!

This comment has been minimized.

github-actions bot commented Mar 12, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Mar 12, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

Chroot Version Comparison Results

Uh oh!

github-actions bot commented Mar 12, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions bot commented Mar 12, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Mar 12, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

lpcox commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

✅ Coverage Check Passed

Overall Coverage

Uh oh!

github-actions bot commented Mar 12, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

Chroot Version Comparison Results

Uh oh!

github-actions bot commented Mar 12, 2026

🏗️ Build Test Suite Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Claude AI commented Mar 12, 2026 •

edited by Copilot AI

Loading