{
  "id": "llm-proxy",
  "name": "LLM Proxy",
  "version": "0.1.0",
  "type": "tool",
  "mode": "managed",
  "transport": "stdio",
  "runtime": "go",
  "trust": "external",
  "description": "Transparent LLM proxy that forwards requests to upstream NewAPI via WireGuard, with API key injection.",
  "command": ["/var/lib/friend/plugins/llm-proxy/llm-proxy"],
  "platform": "linux/amd64",
  "config_schema": {
    "api_key": {
      "type": "string",
      "description": "Upstream API key (injected as Authorization: Bearer)",
      "required": true,
      "secret": true
    },
    "upstream_base": {
      "type": "string",
      "description": "Upstream LLM API base URL (via WireGuard)",
      "default": "http://10.200.0.20:3000"
    },
    "listen_addr": {
      "type": "string",
      "description": "Local listen address for the HTTP proxy",
      "default": "127.0.0.1:39527"
    }
  },
  "secrets": ["api_key"],
  "supports_hot_reload": true
}