Port upstream 0.64.0: LLM Proxy base URL setting, private-network HTTP, tolerant quota_groups

[Finesssee]

Found by the 0.60.4-0.69.0 port gap audit (gap G7, release bullet 0.64.0 #29).

Summary

LLM Proxy now behaves like upstream 0.64.0 for its endpoint handling:

• The base URL is a stored setting (Providers tab, LLM Proxy, "Base URL"), with LLM_PROXY_BASE_URL as the fallback. The API key path is unchanged (LLM_PROXY_API_KEY bearer, keyring, or Preferences).
• Endpoint policy is "https or private-network http": plain HTTP is accepted for loopback, RFC1918, unique-local, link-local and .local hosts. Public hosts still need HTTPS, and user info is rejected.
• The quota URL keeps any ?query / #fragment at the end: the configured base is split at the first ? or #, trailing slashes are trimmed, /v1 is appended only when the percent-decoded path does not already end in /v1, then /quota-stats and the suffix.
• Malformed quota_groups (string, number, null, array of non-objects, group with a non-numeric remaining_percent) is treated as absent for that provider without discarding its requests, tokens or cost. Arrays and objects (values) are both accepted.

Upstream reference

• Release bullet: "Improved: LLM Proxy via plugin, preserving self-hosted origins, aggregate usage, provider summaries".
• Tag-pinned at v0.64.0 (read-only GET): Sources/CodexBarCore/Resources/Plugins/llmproxy.ts (endpoint policy, suffix split, tolerant quota_groups), Sources/CodexBarCore/Providers/LLMProxy/LLMProxySettingsReader.swift (private-network HTTP validation, error text), Sources/CodexBar/Providers/LLMProxy/LLMProxyProviderImplementation.swift (API key + Base URL settings fields).
• I did not look up the upstream PR number, so none is cited.

Ported / Deferred

Ported: base URL setting with env fallback, private-network HTTP policy (new validated_https_or_private_http_url next to validated_https_url, which keeps its HTTPS-only behavior), suffix-preserving /v1/quota-stats URL, tolerant quota_groups, Settings field with en-US strings, settings-side validation (provider_workspace.rs) so a bad URL is rejected at save time.

Left out:

• Other locales fall back to en-US for the four new LlmProxy* keys (same fallback path other recent keys use).
• Upstream's plugin returns no primary window when no quota group reports a percentage; Win-CodexBar keeps its existing 0% primary. That is unrelated to this gap and was not changed.
• Upstream availability gating on "key and base URL both configured" is not ported; Win-CodexBar's provider enablement is unchanged.
• Numeric strictness of the upstream plugin (for example rejecting a non-integer total_requests) is not ported; existing serde decoding is kept.

Validation

All with cargo +1.98.0 through the E-core wrappers, slot-8 target dir.

• cargo fmt --all: clean
• cargo clippy --workspace --all-targets -- -D warnings: pass
• cargo test -p codexbar --lib -- llmproxy provider_workspace locale validated: 34 passed
• cargo test -p codexbar (full): 2167 passed, 0 failed, 1 ignored
• cargo test -p codexbar-desktop-tauri: 461 passed, 1 failed, the known bootstrap_payload_exposes_every_provider_variant (fixed by Isolate bootstrap payload test from real settings #684, ignored per brief)
• pnpm --dir apps/desktop-tauri exec vitest run: 67 files, 402 tests passed
• pnpm --dir apps/desktop-tauri run build: pass
• pnpm --dir apps/desktop-tauri run lint: only pre-existing unused-variable warnings in untouched files

New tests cover URL suffix//v1 rules (including percent-encoded v1, query and fragment), the https-or-private-http policy (accept and reject lists), settings-over-env precedence, malformed/array/object quota_groups, and save-time validation.

Affected areas

• Providers (rust/src/providers/llmproxy, shared URL validator in providers/mod.rs)
• Settings (workspace-value validation, Providers tab field)
• Frontend (Providers tab credentials section, i18n keys)
• Tray / float bar / CLI

UI proof

Pending: coordinator will capture CUA proof on a fresh build (LLM Proxy "Base URL" field in the Providers tab).

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}