@codemieai/code 0.15.6 → 0.15.7

package/dist/utils/system-proxy-dispatcher.js

@@ -0,0 +1,100 @@
+/**
+ * Undici dispatcher that applies the shared system-proxy resolver to global fetch.
+ */
+import { Agent, Dispatcher, getGlobalDispatcher, ProxyAgent, setGlobalDispatcher, } from 'undici';
+import { logger } from './logger.js';
+import { sanitizeLogArgs } from './security.js';
+import { isTlsVerificationEnabled, resolveProxyForUrl } from './system-proxy.js';
+const dispatcherCache = new Map();
+let installedDispatcher;
+let previousDispatcher;
+function toError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+/** Route each Undici request through the same per-URL proxy policy as Node HTTP clients. */
+class SystemProxyDispatcher extends Dispatcher {
+    directDispatcher;
+    rejectUnauthorized;
+    constructor() {
+        super();
+        this.rejectUnauthorized = isTlsVerificationEnabled();
+        this.directDispatcher = new Agent({
+            connect: { rejectUnauthorized: this.rejectUnauthorized },
+        });
+    }
+    dispatch(options, handler) {
+        void this.selectDispatcher(options)
+            .then(dispatcher => dispatcher.dispatch(options, handler))
+            .catch(error => handler.onError?.(toError(error)));
+        return true;
+    }
+    close(callback) {
+        const closing = Promise.all([
+            this.directDispatcher.close(),
+            ...[...dispatcherCache.values()].map(dispatcher => dispatcher.close()),
+        ]).then(() => undefined);
+        if (callback) {
+            void closing.then(callback, callback);
+            return;
+        }
+        return closing;
+    }
+    destroy(errorOrCallback = null, callback) {
+        const error = typeof errorOrCallback === 'function' ? null : errorOrCallback;
+        const done = typeof errorOrCallback === 'function' ? errorOrCallback : callback;
+        const destroying = Promise.all([
+            this.directDispatcher.destroy(error),
+            ...[...dispatcherCache.values()].map(dispatcher => dispatcher.destroy(error)),
+        ]).then(() => undefined);
+        if (done) {
+            void destroying.then(done, done);
+            return;
+        }
+        return destroying;
+    }
+    async selectDispatcher(options) {
+        if (!options.origin)
+            return this.directDispatcher;
+        const origin = new URL(options.origin.toString());
+        const target = new URL(options.path, origin);
+        const proxyUrl = await resolveProxyForUrl(target);
+        if (!proxyUrl)
+            return this.directDispatcher;
+        const cacheKey = `${proxyUrl}|${this.rejectUnauthorized}`;
+        const cached = dispatcherCache.get(cacheKey);
+        if (cached)
+            return cached;
+        try {
+            const dispatcher = new ProxyAgent({
+                uri: proxyUrl,
+                requestTls: { rejectUnauthorized: this.rejectUnauthorized },
+                proxyTls: { rejectUnauthorized: this.rejectUnauthorized },
+            });
+            dispatcherCache.set(cacheKey, dispatcher);
+            return dispatcher;
+        }
+        catch (error) {
+            logger.debug('[system-proxy] Failed to construct fetch proxy dispatcher; continuing direct', ...sanitizeLogArgs({ hasProxy: true, error: toError(error).message }));
+            return this.directDispatcher;
+        }
+    }
+}
+/** Install the system-proxy dispatcher once for this process. */
+export function installSystemProxyDispatcher() {
+    if (installedDispatcher)
+        return;
+    previousDispatcher = getGlobalDispatcher();
+    installedDispatcher = new SystemProxyDispatcher();
+    setGlobalDispatcher(installedDispatcher);
+}
+/** Test seam for releasing dispatcher resources and allowing reinstallation. */
+export async function resetSystemProxyDispatcher() {
+    if (installedDispatcher && previousDispatcher)
+        setGlobalDispatcher(previousDispatcher);
+    if (installedDispatcher)
+        await installedDispatcher.destroy();
+    installedDispatcher = undefined;
+    previousDispatcher = undefined;
+    dispatcherCache.clear();
+}
+//# sourceMappingURL=system-proxy-dispatcher.js.map

package/dist/utils/system-proxy-dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-proxy-dispatcher.js","sourceRoot":"","sources":["../../src/utils/system-proxy-dispatcher.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,KAAK,EACL,UAAU,EACV,mBAAmB,EACnB,UAAU,EACV,mBAAmB,GACpB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEjF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAsB,CAAC;AACtD,IAAI,mBAAsD,CAAC;AAC3D,IAAI,kBAA0C,CAAC;AAE/C,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,4FAA4F;AAC5F,MAAM,qBAAsB,SAAQ,UAAU;IAC3B,gBAAgB,CAAQ;IACxB,kBAAkB,CAAU;IAE7C;QACE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,IAAI,KAAK,CAAC;YAChC,OAAO,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,OAAmC,EAAE,OAAoC;QAChF,KAAK,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;aAChC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;aACzD,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IAID,KAAK,CAAC,QAAqB;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;YAC1B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE;YAC7B,GAAG,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;SACvE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAMD,OAAO,CACL,kBAA+C,IAAI,EACnD,QAAqB;QAErB,MAAM,KAAK,GAAG,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QAC7E,MAAM,IAAI,GAAG,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;YAC7B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC;YACpC,GAAG,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SAC9E,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAmC;QAChE,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAElD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAE5C,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;gBAChC,GAAG,EAAE,QAAQ;gBACb,UAAU,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;gBAC3D,QAAQ,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;aAC1D,CAAC,CAAC;YACH,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC1C,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,8EAA8E,EAC9E,GAAG,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CACtE,CAAC;YACF,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC;IACH,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,UAAU,4BAA4B;IAC1C,IAAI,mBAAmB;QAAE,OAAO;IAChC,kBAAkB,GAAG,mBAAmB,EAAE,CAAC;IAC3C,mBAAmB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAClD,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;AAC3C,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,IAAI,mBAAmB,IAAI,kBAAkB;QAAE,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IACvF,IAAI,mBAAmB;QAAE,MAAM,mBAAmB,CAAC,OAAO,EAAE,CAAC;IAC7D,mBAAmB,GAAG,SAAS,CAAC;IAChC,kBAAkB,GAAG,SAAS,CAAC;IAC/B,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC"}

package/dist/utils/system-proxy.d.ts

@@ -0,0 +1,115 @@
+/**
+ * System Proxy Resolution
+ *
+ * Resolves the effective proxy for an outbound request, in precedence order:
+ *   1. `HTTPS_PROXY` / `HTTP_PROXY` / `NO_PROXY` environment variables
+ *   2. Windows Internet Settings — `ProxyOverride`, then `AutoConfigURL` (PAC),
+ *      then the static `ProxyServer` only when the PAC is unavailable
+ *
+ * Node's `http`/`https` modules never consult any system proxy configuration, so
+ * without this module Windows users behind a PAC-based corporate proxy (Zscaler
+ * and similar) have to discover and hand-set `HTTPS_PROXY` themselves.
+ *
+ * Set `CODEMIE_NO_SYSTEM_PROXY=1` to skip system detection and use env vars only.
+ */
+import http from 'http';
+/**
+ * Never proxied. The CLI's own LLM proxy listens on loopback, so routing these
+ * through a corporate proxy would break every agent session.
+ */
+export declare const IMPLICIT_NO_PROXY: string[];
+export type NoProxyRule = {
+    kind: 'all';
+} | {
+    kind: 'host';
+    value: string;
+    port?: number;
+} | {
+    kind: 'domain';
+    value: string;
+    port?: number;
+} | {
+    kind: 'cidr';
+    base: number;
+    maskBits: number;
+} | {
+    kind: 'plain-hostname';
+};
+export declare function splitRules(raw: string | undefined, separator?: string): string[];
+export declare function parseNoProxyRules(values: string[]): NoProxyRule[];
+export declare function shouldBypassProxy(hostname: string, port: number, rules: NoProxyRule[]): boolean;
+export declare function getEnvProxyUrl(protocol: 'http:' | 'https:'): string | undefined;
+export declare function getEnvNoProxyEntries(): string[];
+interface WindowsInternetSettings {
+    proxyEnable: boolean;
+    proxyServer?: string;
+    proxyOverride?: string;
+    autoConfigUrl?: string;
+    source: 'user' | 'machine';
+}
+export interface SystemProxyConfig {
+    /** Windows static proxy or undefined when PAC-based / unset. */
+    settings?: WindowsInternetSettings;
+    /** Loopback plus NO_PROXY/no_proxy and npm noproxy. */
+    environmentNoProxyRules: NoProxyRule[];
+    /** Windows ProxyOverride rules, applied only when no explicit env proxy exists. */
+    windowsNoProxyRules: NoProxyRule[];
+    /** Combined rules retained for diagnostics and compatibility. */
+    noProxyRules: NoProxyRule[];
+}
+export type ProxyResolution = {
+    kind: 'proxy';
+    url: string;
+    source: 'environment' | 'pac' | 'windows-static';
+} | {
+    kind: 'direct';
+    source: 'bypass' | 'pac' | 'none' | 'invalid-proxy';
+} | {
+    kind: 'unavailable';
+    source: 'pac';
+    reason: string;
+};
+/** Load the effective proxy configuration with bounded success/failure caching. */
+export declare function getSystemProxyConfig(): Promise<SystemProxyConfig>;
+/**
+ * Resolve a request to an explicit proxy, direct connection, or unavailable PAC.
+ *
+ * Explicit NO_PROXY applies first, then user proxy variables. Windows bypass,
+ * PAC and static settings are considered only when the user did not override
+ * routing through the environment.
+ */
+export declare function resolveProxyForUrlDetailed(url: URL): Promise<ProxyResolution>;
+/** Resolve the proxy URL for Node HTTP clients, or `undefined` for direct. */
+export declare function resolveProxyForUrl(url: URL): Promise<string | undefined>;
+export interface ProxyAgentOptions {
+    rejectUnauthorized?: boolean;
+    keepAlive?: boolean;
+    maxSockets?: number;
+}
+/**
+ * Agent that routes `url` through the resolved proxy, or `undefined` when the
+ * request should go direct (letting Node use its default agent).
+ */
+export declare function getProxyAgentForUrl(url: URL, options?: ProxyAgentOptions): Promise<http.Agent | undefined>;
+/**
+ * Return whether outbound TLS certificates must be verified.
+ *
+ * Callers pass the result as an explicit `rejectUnauthorized`, which overrides
+ * Node's own process-wide `NODE_TLS_REJECT_UNAUTHORIZED=0` opt-out, so honor it
+ * here alongside `CODEMIE_INSECURE`.
+ */
+export declare function isTlsVerificationEnabled(): boolean;
+/** Merge NO_PROXY spellings and implicit loopback entries without duplicates. */
+export declare function mergeNoProxyValues(...values: Array<string | undefined>): string;
+/**
+ * Build the best-effort proxy environment for SDKs and spawned tools.
+ * PAC routing is necessarily collapsed to the target host; in-process clients
+ * retain per-request accuracy through {@link resolveProxyForUrlDetailed}.
+ */
+export declare function buildSystemProxyEnvironment(targetUrl: string, baseEnv?: NodeJS.ProcessEnv): Promise<NodeJS.ProcessEnv>;
+/** Apply the shared proxy environment to a mutable process or child environment. */
+export declare function applySystemProxyEnvironment(targetUrl: string, targetEnv?: NodeJS.ProcessEnv): Promise<void>;
+/** Test seam: drop cached registry/PAC/agent state. */
+export declare function resetSystemProxyCache(): void;
+export {};
+//# sourceMappingURL=system-proxy.d.ts.map

package/dist/utils/system-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-proxy.d.ts","sourceRoot":"","sources":["../../src/utils/system-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AAkCxB;;;GAGG;AACH,eAAO,MAAM,iBAAiB,UAAoC,CAAC;AAMnE,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE/B,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,SAAM,GAAG,MAAM,EAAE,CAM7E;AAqED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAyCjE;AA4BD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CA4B/F;AA6BD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAE/E;AAED,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAM/C;AAMD,UAAU,uBAAuB;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAkWD,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,uDAAuD;IACvD,uBAAuB,EAAE,WAAW,EAAE,CAAC;IACvC,mFAAmF;IACnF,mBAAmB,EAAE,WAAW,EAAE,CAAC;IACnC,iEAAiE;IACjE,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,GAAG,KAAK,GAAG,gBAAgB,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,eAAe,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAwD3D,mFAAmF;AACnF,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAkBvE;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,CA0CnF;AAED,8EAA8E;AAC9E,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAG9E;AA0ED,MAAM,WAAW,iBAAiB;IAChC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,GAAG,EACR,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,CAkCjC;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAElD;AAaD,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAW/E;AAgDD;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,MAAM,CAAC,UAAwB,GACvC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CA+B5B;AAED,oFAAoF;AACpF,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,MAAM,CAAC,UAAwB,GACzC,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED,uDAAuD;AACvD,wBAAgB,qBAAqB,IAAI,IAAI,CAS5C"}