feat: add byok-relay to Development Tools - #153
Open
alokit-bot wants to merge 2 commits into
Open
Conversation
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Code Review
This pull request adds the byok-relay project to the README, describing it as a self-hosted relay for user-supplied AI API keys. The review feedback recommends removing an extra blank line for consistency, changing the term 'register' to 'configure' for clarity, and ensuring the Chinese version of the README is also updated.
Comment on lines
+509
to
+510
|
|
||
| - [byok-relay](https://github.com/avikalpg/byok-relay) |
Contributor
There was a problem hiding this comment.
There is an extra blank line introduced before the new entry. Removing it will maintain consistency with the spacing used for other items in this section.
Suggested change
| - [byok-relay](https://github.com/avikalpg/byok-relay) | |
| - [byok-relay](https://github.com/avikalpg/byok-relay) |
|
|
||
| - [byok-relay](https://github.com/avikalpg/byok-relay) | ||
|
|
||
| A self-hosted (or managed) relay that lets frontend apps use user-supplied AI API keys — no CORS issues, no exposed keys, no inference bill for the developer. Users register their own Anthropic, OpenAI, Google, Groq, OpenRouter, or Mistral key once; the relay stores it encrypted (AES-256-GCM) and proxies all subsequent requests server-side with SSE streaming support. |
Contributor
There was a problem hiding this comment.
This repository is bilingual. Please add the corresponding entry to README.cn.md to keep both versions in sync. A suggested translation is provided below. Additionally, 'configure' is more appropriate than 'register' for API keys in this context.
Chinese Translation:
-
一个自托管（或托管）的中继，允许前端应用使用用户提供的 AI API 密钥 —— 无 CORS 问题，无密钥泄露，开发者无需承担推理费用。用户只需配置一次其 Anthropic、OpenAI、Google、Groq、OpenRouter 或 Mistral 密钥；中继将其加密存储 (AES-256-GCM)，并支持 SSE 流式传输，在服务端代理所有后续请求。
Suggested change
| A self-hosted (or managed) relay that lets frontend apps use user-supplied AI API keys — no CORS issues, no exposed keys, no inference bill for the developer. Users register their own Anthropic, OpenAI, Google, Groq, OpenRouter, or Mistral key once; the relay stores it encrypted (AES-256-GCM) and proxies all subsequent requests server-side with SSE streaming support. | |
| A self-hosted (or managed) relay that lets frontend apps use user-supplied AI API keys — no CORS issues, no exposed keys, no inference bill for the developer. Users configure their own Anthropic, OpenAI, Google, Groq, OpenRouter, or Mistral key once; the relay stores it encrypted (AES-256-GCM) and proxies all subsequent requests server-side with SSE streaming support. |
…igure, add README.cn.md entry
alokit-bot
added a commit
to avikalpg/byok-relay
that referenced
this pull request
Jul 24, 2026
* growth(day-5): submit to awesome-llm and awesome-self-hosted lists Opened PRs: - tensorchord/Awesome-LLMOps#491 (LLMOps section) - reorx/awesome-chatgpt-api#153 (Development Tools) Updated README 'Find us on' section to track pending listings. awesome-selfhosted submission prepared separately (eligible 2026-08-14). * feat: Add ClawHub CI/CD pipeline for skill publishing Implements automated skill publishing workflow that: **Automatic Publishing:** - Auto-increments patch version on every skill update to main - Publishes to ClawHub registry (https://clawhub.ai) - Triggers website rebuild to sync /skill endpoint - Creates git tags for version tracking (skill-vX.Y.Z) **Manual Controls:** - Supports major/minor/patch version bumps via workflow_dispatch - Custom changelog entries for release notes - Fallback manual publishing instructions **Version Management:** - Tracks version in skills/byok-relay/VERSION (semver) - Auto-generates changelog from commit messages - Commits version bump back to repo **Website Sync:** - Triggers Vercel Deploy Hook to rebuild byok-relay-website - Website prebuild script curls latest SKILL.md from GitHub - /skill endpoint always serves latest published version **Required Secrets:** - CLAWHUB_API_TOKEN: for ClawHub authentication - VERCEL_DEPLOY_HOOK_URL: to trigger website rebuild **Files Added:** - .github/workflows/publish-skill.yml: CI/CD workflow - skills/byok-relay/VERSION: version tracker (starting at 1.0.0) - docs/SKILL_PUBLISHING.md: comprehensive docs + troubleshooting Resolves: Multi-registry skill distribution Enables: One-command skill updates across ClawHub + website + GitHub * security: fix code injection and secrets context in publish-skill workflow - PR #17 CodeRabbit fixes: 1. CRITICAL: Fix shell injection - use env var USER_CHANGELOG instead of direct ${{ github.event.inputs.changelog }} interpolation in bash 2. Filter git describe to skill-specific tags with --match 'skill-v*' to avoid picking up unrelated repo tags 3. CRITICAL: Fix invalid 'secrets' context in step 'if' condition - replace 'if: secrets.VERCEL_DEPLOY_HOOK_URL != ""' with env var check inside the run step (env: VERCEL_DEPLOY_HOOK_URL + bash guard)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
byok-relay — BYOK relay for frontend apps
byok-relay is a self-hosted (or managed) relay that lets frontend apps use user-supplied AI API keys — exactly the pattern this list curates.
Fits this list's criteria:
Why it's different from a simple proxy: Users own their key — it never leaves the relay in plaintext, and the frontend only ever holds a short-lived relay token (not the real API key). This solves the trust problem of BYOK for browser-only apps.