@cuna_labs/cli 0.1.0

package/dist/local-actions/browser-action.js

@@ -0,0 +1,307 @@
+import { randomBytes, randomUUID } from "node:crypto";
+import { TextDecoder, TextEncoder } from "node:util";
+const MAX_BUFFER_CHARACTERS = 16_384;
+const MAX_URL_CHARACTERS = 8_192;
+const MAX_GUARDED_PASTE_BYTES = 1_048_576;
+const DEFAULT_TTL_MS = 2 * 60_000;
+const URL_CANDIDATE = /https:\/\/[^\s\p{Cc}<>"']{1,8192}(?=[\s\p{Cc}<>"']|$)/gu;
+const BRACKETED_PASTE_START = Uint8Array.of(0x1b, 0x5b, 0x32, 0x30, 0x30, 0x7e);
+const BRACKETED_PASTE_END = Uint8Array.of(0x1b, 0x5b, 0x32, 0x30, 0x31, 0x7e);
+/**
+ * A byte-preserving guard for the provider's hidden authorization-code prompt.
+ *
+ * It buffers only a complete bracketed paste, so a URL split across stdin
+ * chunks cannot leak partially before it is classified. Opaque input is
+ * returned byte-for-byte (including its bracketed-paste markers). The result
+ * deliberately carries no rejected value, URL, or diagnostic text.
+ */
+export class ProviderOAuthPasteGuard {
+    #provider;
+    #requestUrl;
+    #requestUrlBytes;
+    #startPrefix = [];
+    #forwardedStartPrefix = 0;
+    #pasteForwardedPrefix = 0;
+    #pasteBytes;
+    #endMatch = 0;
+    #disabled = false;
+    #captureCodes = false;
+    constructor(request) {
+        const admitted = admitProviderAuthUrl(request.provider, request.url);
+        if (request.type !== "browser.open" ||
+            request.state !== "pending_permission" ||
+            !identifier(request.agentSessionId) ||
+            !identifier(request.processEpoch) ||
+            !Number.isSafeInteger(request.fencingGeneration) ||
+            request.fencingGeneration < 1 ||
+            admitted?.href !== request.url) {
+            throw new TypeError("OAuth paste guard requires an exact admitted browser request binding.");
+        }
+        this.#provider = request.provider;
+        this.#requestUrl = request.url;
+        this.#requestUrlBytes = new TextEncoder().encode(request.url);
+    }
+    push(bytes) {
+        if (bytes.byteLength === 0)
+            return pasteGuardResult([], false);
+        if (this.#disabled)
+            return pasteGuardResult([bytes], false);
+        const forward = [];
+        let output = [];
+        let blocked = false;
+        const flushOutput = () => {
+            if (output.length === 0)
+                return;
+            forward.push(Uint8Array.from(output));
+            output = [];
+        };
+        for (const byte of bytes) {
+            if (this.#disabled) {
+                output.push(byte);
+                continue;
+            }
+            if (this.#pasteBytes !== undefined) {
+                if (this.#pasteBytes.length >= MAX_GUARDED_PASTE_BYTES) {
+                    flushOutput();
+                    forward.push(Uint8Array.from(this.#pasteBytes.slice(this.#pasteForwardedPrefix)));
+                    this.#pasteForwardedPrefix = 0;
+                    this.#pasteBytes = undefined;
+                    this.#endMatch = 0;
+                    this.#disabled = true;
+                    output.push(byte);
+                    continue;
+                }
+                this.#pasteBytes.push(byte);
+                this.#endMatch = advanceMarkerMatch(BRACKETED_PASTE_END, this.#endMatch, byte);
+                if (this.#endMatch === BRACKETED_PASTE_END.byteLength) {
+                    const paste = Uint8Array.from(this.#pasteBytes);
+                    const forwardedPrefix = this.#pasteForwardedPrefix;
+                    this.#pasteForwardedPrefix = 0;
+                    this.#pasteBytes = undefined;
+                    this.#endMatch = 0;
+                    if (this.#isProviderUrlPaste(paste)) {
+                        blocked = true;
+                    }
+                    else if (this.#captureCodes) {
+                        flushOutput();
+                        // Once marker bytes have escaped, preserve the original framing;
+                        // inventing an extra Enter could execute input in a changed prompt.
+                        forward.push(forwardedPrefix === 0 ? capturedCodeBytes(paste) : paste.subarray(forwardedPrefix));
+                    }
+                    else {
+                        flushOutput();
+                        forward.push(paste.subarray(forwardedPrefix));
+                    }
+                }
+                continue;
+            }
+            if (this.#startPrefix.length === 0) {
+                if (byte === BRACKETED_PASTE_START[0])
+                    this.#startPrefix.push(byte);
+                else
+                    output.push(byte);
+                continue;
+            }
+            const expected = BRACKETED_PASTE_START[this.#startPrefix.length];
+            if (byte === expected) {
+                this.#startPrefix.push(byte);
+                if (this.#startPrefix.length === BRACKETED_PASTE_START.byteLength) {
+                    flushOutput();
+                    this.#pasteBytes = this.#startPrefix;
+                    this.#pasteForwardedPrefix = this.#forwardedStartPrefix;
+                    this.#forwardedStartPrefix = 0;
+                    this.#startPrefix = [];
+                    this.#endMatch = 0;
+                }
+                continue;
+            }
+            output.push(...this.#startPrefix.slice(this.#forwardedStartPrefix));
+            this.#forwardedStartPrefix = 0;
+            this.#startPrefix = [];
+            if (byte === BRACKETED_PASTE_START[0])
+                this.#startPrefix.push(byte);
+            else
+                output.push(byte);
+        }
+        flushOutput();
+        return pasteGuardResult(forward, blocked);
+    }
+    /** Drop any partial paste when its exact terminal binding is no longer valid. */
+    reset() {
+        this.#startPrefix = [];
+        this.#pasteBytes = undefined;
+        this.#endMatch = 0;
+        this.#disabled = false;
+        this.#forwardedStartPrefix = 0;
+        this.#pasteForwardedPrefix = 0;
+    }
+    get hasPendingPrefix() {
+        return this.#startPrefix.length > this.#forwardedStartPrefix;
+    }
+    /** Release only marker bytes; retain recognition so a late URL cannot leak. */
+    releasePendingPrefix() {
+        const bytes = Uint8Array.from(this.#startPrefix.slice(this.#forwardedStartPrefix));
+        this.#forwardedStartPrefix = this.#startPrefix.length;
+        return bytes;
+    }
+    /** Commit a complete pasted provider code as opaque bytes plus exactly one CR. */
+    beginCodeCapture() {
+        this.#captureCodes = true;
+    }
+    #isProviderUrlPaste(paste) {
+        let start = BRACKETED_PASTE_START.byteLength;
+        let end = paste.byteLength - BRACKETED_PASTE_END.byteLength;
+        while (start < end && (paste[start] === 0x0a || paste[start] === 0x0d))
+            start += 1;
+        while (end > start && (paste[end - 1] === 0x0a || paste[end - 1] === 0x0d))
+            end -= 1;
+        const candidate = paste.subarray(start, end);
+        if (bytesEqual(candidate, this.#requestUrlBytes))
+            return true;
+        let text;
+        try {
+            text = new TextDecoder("utf-8", { fatal: true }).decode(candidate);
+        }
+        catch {
+            return false;
+        }
+        if (text === this.#requestUrl)
+            return true;
+        return admitProviderAuthUrl(this.#provider, text) !== undefined;
+    }
+}
+function capturedCodeBytes(paste) {
+    let start = BRACKETED_PASTE_START.byteLength;
+    let end = paste.byteLength - BRACKETED_PASTE_END.byteLength;
+    while (start < end && (paste[start] === 0x0a || paste[start] === 0x0d))
+        start += 1;
+    while (end > start && (paste[end - 1] === 0x0a || paste[end - 1] === 0x0d))
+        end -= 1;
+    const result = new Uint8Array(end - start + 1);
+    result.set(paste.subarray(start, end));
+    result[result.byteLength - 1] = 0x0d;
+    return result;
+}
+function advanceMarkerMatch(marker, current, byte) {
+    if (byte === marker[current])
+        return current + 1;
+    return byte === marker[0] ? 1 : 0;
+}
+function bytesEqual(left, right) {
+    if (left.byteLength !== right.byteLength)
+        return false;
+    for (let index = 0; index < left.byteLength; index += 1) {
+        if (left[index] !== right[index])
+            return false;
+    }
+    return true;
+}
+function pasteGuardResult(forward, blocked) {
+    return Object.freeze({ forward: Object.freeze([...forward]), blocked });
+}
+/**
+ * Turns Claude/Codex's established PTY browser fallback into a typed local
+ * request. OpenCode is deliberately excluded: its TUI text is output only;
+ * a future private sidecar must use the RTP1 `auth.device.present` envelope.
+ * Detection cannot execute anything and the full URL is never logged.
+ */
+export class ProviderBrowserActionDetector {
+    #options;
+    #decoder = new TextDecoder("utf-8", { fatal: false });
+    #seen = new Set();
+    #buffer = "";
+    constructor(options) {
+        if (!browserActionProvider(options.provider)) {
+            throw new TypeError("PTY browser detection supports only Claude Code and Codex.");
+        }
+        if (!identifier(options.agentSessionId) || !identifier(options.processEpoch)) {
+            throw new TypeError("Browser action detection requires an exact AgentSession process binding.");
+        }
+        if (!Number.isSafeInteger(options.fencingGeneration) || options.fencingGeneration < 1) {
+            throw new TypeError("Browser action detection requires a positive attachment generation.");
+        }
+        const ttlMs = options.ttlMs ?? DEFAULT_TTL_MS;
+        if (!Number.isSafeInteger(ttlMs) || ttlMs < 1_000 || ttlMs > 10 * 60_000) {
+            throw new RangeError("Browser action expiry must be between one second and ten minutes.");
+        }
+        this.#options = Object.freeze({ ...options, ttlMs });
+    }
+    push(bytes) {
+        if (bytes.byteLength === 0)
+            return Object.freeze([]);
+        this.#buffer += this.#decoder.decode(bytes, { stream: true });
+        if (this.#buffer.length > MAX_BUFFER_CHARACTERS)
+            this.#buffer = this.#buffer.slice(-MAX_BUFFER_CHARACTERS);
+        const requests = [];
+        for (const match of this.#buffer.matchAll(URL_CANDIDATE)) {
+            const raw = match[0];
+            if (raw.length > MAX_URL_CHARACTERS || this.#seen.has(raw))
+                continue;
+            if (this.#options.copyOnly && match.index + raw.length === this.#buffer.length)
+                continue;
+            let admitted = admitProviderAuthUrl(this.#options.provider, raw);
+            if (admitted === undefined && this.#options.copyOnly && this.#options.provider === "codex") {
+                try {
+                    const candidate = new URL(raw);
+                    if (candidate.origin === "https://auth.openai.com" && candidate.pathname === "/oauth/authorize" && !candidate.username && !candidate.password)
+                        admitted = candidate;
+                }
+                catch { /* Not a complete URL. */ }
+            }
+            if (admitted === undefined)
+                continue;
+            this.#seen.add(raw);
+            const detectedAt = (this.#options.clock ?? Date.now)();
+            requests.push(Object.freeze({
+                id: (this.#options.id ?? randomUUID)(),
+                type: "browser.open",
+                provider: this.#options.provider,
+                agentSessionId: this.#options.agentSessionId,
+                processEpoch: this.#options.processEpoch,
+                fencingGeneration: this.#options.fencingGeneration,
+                url: admitted.href,
+                origin: admitted.origin,
+                nonce: (this.#options.nonce ?? (() => randomBytes(32).toString("base64url")))(),
+                detectedAt,
+                expiresAt: detectedAt + (this.#options.ttlMs ?? DEFAULT_TTL_MS),
+                state: "pending_permission",
+            }));
+        }
+        if (this.#buffer.length > MAX_URL_CHARACTERS)
+            this.#buffer = this.#buffer.slice(-MAX_URL_CHARACTERS);
+        return Object.freeze(requests);
+    }
+}
+function browserActionProvider(value) {
+    return value === "claude-code" || value === "codex";
+}
+export function admitProviderAuthUrl(provider, raw) {
+    if (raw.length < 1 || raw.length > MAX_URL_CHARACTERS)
+        return undefined;
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.port !== "")
+        return undefined;
+    const host = url.hostname.toLowerCase();
+    if (provider === "claude-code") {
+        if (!new Set(["claude.com", "platform.claude.com", "console.anthropic.com"]).has(host))
+            return undefined;
+        if (!url.pathname.toLowerCase().endsWith("/oauth/authorize"))
+            return undefined;
+        return url;
+    }
+    // Browser PKCE callbacks bind to localhost inside the remote VM. Only Codex's
+    // explicit headless device page is safe to open on the user's local machine.
+    if (host !== "auth.openai.com" || url.pathname.replace(/\/+$/u, "") !== "/codex/device")
+        return undefined;
+    return url;
+}
+function identifier(value) {
+    return value.length >= 1 && value.length <= 256 && !/\p{Cc}/u.test(value);
+}
+//# sourceMappingURL=browser-action.js.map

package/dist/local-actions/browser-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-action.js","sourceRoot":"","sources":["../../src/local-actions/browser-action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAyDrD,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAC1C,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC;AAClC,MAAM,aAAa,GAAG,yDAAyD,CAAC;AAChF,MAAM,qBAAqB,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAChF,MAAM,mBAAmB,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAS9E;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IACzB,SAAS,CAAwB;IACjC,WAAW,CAAS;IACpB,gBAAgB,CAAa;IACtC,YAAY,GAAa,EAAE,CAAC;IAC5B,qBAAqB,GAAG,CAAC,CAAC;IAC1B,qBAAqB,GAAG,CAAC,CAAC;IAC1B,WAAW,CAAuB;IAClC,SAAS,GAAG,CAAC,CAAC;IACd,SAAS,GAAG,KAAK,CAAC;IAClB,aAAa,GAAG,KAAK,CAAC;IAEtB,YAAY,OAAsC;QAChD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACrE,IACE,OAAO,CAAC,IAAI,KAAK,cAAc;YAC/B,OAAO,CAAC,KAAK,KAAK,oBAAoB;YACtC,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC;YACnC,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC;YACjC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAChD,OAAO,CAAC,iBAAiB,GAAG,CAAC;YAC7B,QAAQ,EAAE,IAAI,KAAK,OAAO,CAAC,GAAG,EAC9B,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,uEAAuE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;QAC/B,IAAI,CAAC,gBAAgB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,KAAiB;QACpB,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,IAAI,MAAM,GAAa,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,WAAW,GAAG,GAAS,EAAE;YAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAChC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACtC,MAAM,GAAG,EAAE,CAAC;QACd,CAAC,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;oBACvD,WAAW,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;oBAClF,IAAI,CAAC,qBAAqB,GAAG,CAAC,CAAC;oBAC/B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;oBAC7B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;oBACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,CAAC,SAAS,GAAG,kBAAkB,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC/E,IAAI,IAAI,CAAC,SAAS,KAAK,mBAAmB,CAAC,UAAU,EAAE,CAAC;oBACtD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAChD,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,CAAC;oBACnD,IAAI,CAAC,qBAAqB,GAAG,CAAC,CAAC;oBAC/B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;oBAC7B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;oBACnB,IAAI,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpC,OAAO,GAAG,IAAI,CAAC;oBACjB,CAAC;yBAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;wBAC9B,WAAW,EAAE,CAAC;wBACd,iEAAiE;wBACjE,oEAAoE;wBACpE,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;oBACnG,CAAC;yBAAM,CAAC;wBACN,WAAW,EAAE,CAAC;wBACd,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;oBAChD,CAAC;gBACH,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,IAAI,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;oBAC/D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,qBAAqB,CAAC,UAAU,EAAE,CAAC;oBAClE,WAAW,EAAE,CAAC;oBACd,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;oBACrC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAC;oBACxD,IAAI,CAAC,qBAAqB,GAAG,CAAC,CAAC;oBAC/B,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;oBACvB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;gBACrB,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,qBAAqB,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;YACvB,IAAI,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;gBAC/D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAED,WAAW,EAAE,CAAC;QACd,OAAO,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,iFAAiF;IACjF,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,qBAAqB,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,qBAAqB,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC;IAC/D,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;QAClB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kFAAkF;IAClF,gBAAgB;QACd,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,mBAAmB,CAAC,KAAiB;QACnC,IAAI,KAAK,GAAG,qBAAqB,CAAC,UAAU,CAAC;QAC7C,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC;QAC5D,OAAO,KAAK,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QACnF,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;YAAE,GAAG,IAAI,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACnG,IAAI,IAAI,KAAK,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,SAAS,CAAC;IAClE,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,KAAiB;IAC1C,IAAI,KAAK,GAAG,qBAAqB,CAAC,UAAU,CAAC;IAC7C,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC;IAC5D,OAAO,KAAK,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IACnF,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkB,EAAE,OAAe,EAAE,IAAY;IAC3E,IAAI,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,GAAG,CAAC,CAAC;IACjD,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAiB;IACrD,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IACvD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA8B,EAC9B,OAAgB;IAEhB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IAC/B,QAAQ,CACqE;IAC7E,QAAQ,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,OAAO,GAAG,EAAE,CAAC;IAEb,YAAY,OAAqC;QAC/C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,SAAS,CAAC,4DAA4D,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,SAAS,CAAC,0EAA0E,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YACzE,MAAM,IAAI,UAAU,CAAC,mEAAmE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,KAAiB;QACpB,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,qBAAqB;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC3G,MAAM,QAAQ,GAAgC,EAAE,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,GAAG,CAAC,MAAM,GAAG,kBAAkB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,SAAS;YACzF,IAAI,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjE,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC3F,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC/B,IAAI,SAAS,CAAC,MAAM,KAAK,yBAAyB,IAAI,SAAS,CAAC,QAAQ,KAAK,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ;wBAAE,QAAQ,GAAG,SAAS,CAAC;gBACtK,CAAC;gBAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpB,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC1B,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,UAAU,CAAC,EAAE;gBACtC,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAChC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;gBAC5C,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;gBACxC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB;gBAClD,GAAG,EAAE,QAAQ,CAAC,IAAI;gBAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;gBAC/E,UAAU;gBACV,SAAS,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,cAAc,CAAC;gBAC/D,KAAK,EAAE,oBAAoB;aAC5B,CAAC,CAAC,CAAC;QACN,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,kBAAkB;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,OAAO,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA+B,EAAE,GAAW;IAC/E,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO,SAAS,CAAC;IACxE,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IACvD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACjH,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACzG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/E,OAAO,GAAG,CAAC;IACb,CAAC;IACD,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,eAAe;QAAE,OAAO,SAAS,CAAC;IAC1G,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC"}

package/dist/local-actions/callback-relay.d.ts

@@ -0,0 +1,45 @@
+import { type IncomingMessage, type Server, type ServerResponse } from "node:http";
+import { type LoopbackHost } from "./loopback.js";
+export type CallbackRelayProvider = "codex" | "opencode";
+export interface AcceptedProviderCallback {
+    readonly provider: CallbackRelayProvider;
+    readonly state: string;
+    readonly code?: string;
+    readonly error?: string;
+}
+export interface CallbackRelayReceipt {
+    readonly outcome: "relayed";
+    readonly acceptedAt: number;
+}
+export interface CallbackRelayHandle {
+    readonly host: LoopbackHost;
+    readonly port: number;
+    readonly completion: Promise<CallbackRelayReceipt>;
+    close(reason?: string): Promise<void>;
+}
+export interface CallbackRelayServerFactory {
+    create(handler: (request: IncomingMessage, response: ServerResponse) => void): Server;
+}
+export interface CallbackRelayOptions {
+    readonly provider: CallbackRelayProvider;
+    readonly localHost: LoopbackHost;
+    readonly exactLocalPort: number;
+    readonly localPath: string;
+    readonly expectedStateDigest: `sha256:${string}`;
+    readonly expectedNonceDigest: `sha256:${string}`;
+    /** Envelope nonce; it is never accepted from or returned to the browser. */
+    readonly requestNonce: string;
+    readonly deadlineMs: number;
+    readonly maxAttempts: number;
+    readonly maxConnections: number;
+    readonly relay: (callback: AcceptedProviderCallback, signal: AbortSignal) => Promise<void>;
+    readonly signal?: AbortSignal;
+    readonly now?: () => number;
+    readonly serverFactory?: CallbackRelayServerFactory;
+}
+export declare class CallbackRelayError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function startCallbackRelay(options: CallbackRelayOptions): Promise<CallbackRelayHandle>;
+//# sourceMappingURL=callback-relay.d.ts.map

package/dist/local-actions/callback-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-relay.d.ts","sourceRoot":"","sources":["../../src/local-actions/callback-relay.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAkD,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAKlG,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,UAAU,CAAC;AAEzD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACnD,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,KAAK,IAAI,GAAG,MAAM,CAAC;CACvF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,UAAU,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,mBAAmB,EAAE,UAAU,MAAM,EAAE,CAAC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,0BAA0B,CAAC;CACrD;AAED,qBAAa,kBAAmB,SAAQ,KAAK;aACR,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIjE;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAoHpG"}

package/dist/local-actions/callback-relay.js

@@ -0,0 +1,265 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+import { assertLoopbackHost, assertPort, isLoopbackPeer } from "./loopback.js";
+const MAX_REQUEST_TARGET_BYTES = 8 * 1024;
+const MAX_CALLBACK_VALUE_BYTES = 8 * 1024;
+export class CallbackRelayError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "CallbackRelayError";
+    }
+}
+export async function startCallbackRelay(options) {
+    validateOptions(options);
+    const now = options.now ?? Date.now;
+    if (isAborted(options.signal))
+        throw new CallbackRelayError("cancelled", "Callback relay was cancelled before it started.");
+    if (now() >= options.deadlineMs)
+        throw new CallbackRelayError("expired", "Callback relay deadline has elapsed.");
+    const controller = new AbortController();
+    let settled = false;
+    let consumed = false;
+    let attempts = 0;
+    let totalConnections = 0;
+    let resolveCompletion;
+    let rejectCompletion;
+    const completion = new Promise((resolve, reject) => {
+        resolveCompletion = resolve;
+        rejectCompletion = reject;
+    });
+    const factory = options.serverFactory ?? {
+        create: (handler) => createServer({ maxHeaderSize: MAX_REQUEST_TARGET_BYTES }, handler),
+    };
+    const server = factory.create((request, response) => {
+        attempts += 1;
+        if (consumed) {
+            fixedResponse(response, 410, "Callback already consumed.");
+            return;
+        }
+        if (now() >= options.deadlineMs) {
+            fixedResponse(response, 410, "Callback relay expired.");
+            void fail("expired", "Callback relay deadline elapsed.");
+            return;
+        }
+        if (attempts > options.maxAttempts) {
+            fixedResponse(response, 429, "Callback attempt limit reached.");
+            void fail("attempt_limit", "Callback attempt limit reached.");
+            return;
+        }
+        const admitted = admitCallbackRequest(request, options);
+        if (admitted === undefined) {
+            fixedResponse(response, 400, "Invalid callback request.");
+            return;
+        }
+        // The one-shot authority is consumed synchronously, before the first await.
+        // This prevents two requests in the same event-loop turn from both relaying.
+        consumed = true;
+        fixedResponse(response, 202, "Callback received. You can return to Cuna.");
+        server.close();
+        void options.relay(admitted, controller.signal).then(() => succeed(), () => fail("relay_failed", "The provider callback could not be relayed."));
+    });
+    server.on("connection", (socket) => {
+        totalConnections += 1;
+        if (totalConnections > options.maxConnections || !isLoopbackPeer(socket.remoteAddress)) {
+            socket.destroy();
+            if (totalConnections > options.maxConnections)
+                void fail("connection_limit", "Callback connection limit reached.");
+        }
+    });
+    let deadlineTimer;
+    let abortRegistered = false;
+    const abortListener = () => { void fail("cancelled", "Callback relay was cancelled."); };
+    function cleanup() {
+        if (deadlineTimer !== undefined)
+            clearTimeout(deadlineTimer);
+        if (abortRegistered)
+            options.signal?.removeEventListener("abort", abortListener);
+        controller.abort();
+        return closeServer(server);
+    }
+    async function fail(code, message) {
+        if (settled)
+            return;
+        settled = true;
+        await cleanup();
+        rejectCompletion(new CallbackRelayError(code, message));
+    }
+    function succeed() {
+        if (settled)
+            return;
+        settled = true;
+        const acceptedAt = now();
+        void cleanup().then(() => resolveCompletion(Object.freeze({ outcome: "relayed", acceptedAt })));
+    }
+    try {
+        await listen(server, options.exactLocalPort, options.localHost);
+    }
+    catch (error) {
+        await cleanup();
+        throw error;
+    }
+    const address = server.address();
+    if (address === null || typeof address === "string" || address.port !== options.exactLocalPort) {
+        await cleanup();
+        throw new CallbackRelayError("bind_mismatch", "Callback relay did not bind the exact requested port.");
+    }
+    if (isAborted(options.signal) || now() >= options.deadlineMs) {
+        await cleanup();
+        throw new CallbackRelayError(isAborted(options.signal) ? "cancelled" : "expired", "Callback relay authority ended while binding.");
+    }
+    deadlineTimer = setTimeout(() => {
+        void fail("expired", "Callback relay deadline elapsed.");
+    }, Math.max(1, options.deadlineMs - now()));
+    deadlineTimer.unref();
+    options.signal?.addEventListener("abort", abortListener, { once: true });
+    abortRegistered = options.signal !== undefined;
+    return Object.freeze({
+        host: options.localHost,
+        port: address.port,
+        completion,
+        close: async (reason = "cancelled") => {
+            await fail("cancelled", reason);
+        },
+    });
+}
+function admitCallbackRequest(request, options) {
+    if (request.method !== "GET" || !isLoopbackPeer(request.socket.remoteAddress))
+        return undefined;
+    const target = request.url;
+    if (target === undefined || Buffer.byteLength(target, "utf8") > MAX_REQUEST_TARGET_BYTES || target.includes("#"))
+        return undefined;
+    if (request.socket.localPort !== options.exactLocalPort || !sameBoundLoopback(request.socket.localAddress, options.localHost) ||
+        !exactHostHeader(request, options.localHost, options.exactLocalPort) || request.headers["content-length"] !== undefined ||
+        request.headers["transfer-encoding"] !== undefined)
+        return undefined;
+    const queryOffset = target.indexOf("?");
+    if (queryOffset <= 0 || target.slice(0, queryOffset) !== options.localPath || target.indexOf("?", queryOffset + 1) !== -1)
+        return undefined;
+    const parameters = parseStrictQuery(target.slice(queryOffset + 1));
+    if (parameters === undefined || parameters.size !== 2 || !parameters.has("state") ||
+        (parameters.has("code") === parameters.has("error")))
+        return undefined;
+    const state = parameters.get("state");
+    const code = parameters.get("code");
+    const providerError = parameters.get("error");
+    if (state === undefined || !boundedValue(state) || !digestMatches(state, options.expectedStateDigest) ||
+        (code !== undefined && !boundedValue(code)) || (providerError !== undefined && !boundedValue(providerError)))
+        return undefined;
+    return Object.freeze({
+        provider: options.provider,
+        state,
+        ...(code === undefined ? {} : { code }),
+        ...(providerError === undefined ? {} : { error: providerError }),
+    });
+}
+function validateOptions(options) {
+    assertLoopbackHost(options.localHost, "Callback relay host");
+    assertPort(options.exactLocalPort, "Callback relay port");
+    if (!/^\/(?:[A-Za-z0-9._~-]+\/)*[A-Za-z0-9._~-]+$/u.test(options.localPath)) {
+        throw new TypeError("Callback path must be an exact absolute path without traversal, query, or fragment.");
+    }
+    if (!digestShape(options.expectedStateDigest) || !digestShape(options.expectedNonceDigest)) {
+        throw new TypeError("Callback state and nonce digests must be SHA-256 digests.");
+    }
+    if (!boundedValue(options.requestNonce) || !digestMatches(options.requestNonce, options.expectedNonceDigest)) {
+        throw new TypeError("Callback relay nonce does not match its approved envelope digest.");
+    }
+    if (!Number.isSafeInteger(options.deadlineMs) || !Number.isSafeInteger(options.maxAttempts) || options.maxAttempts < 1 ||
+        !Number.isSafeInteger(options.maxConnections) || options.maxConnections < 1 || options.maxConnections > 32) {
+        throw new TypeError("Callback relay bounds are invalid.");
+    }
+}
+function digestShape(value) {
+    return /^sha256:[0-9a-f]{64}$/u.test(value);
+}
+function digestMatches(value, expected) {
+    const actual = Buffer.from(createHash("sha256").update(value, "utf8").digest("hex"), "ascii");
+    const wanted = Buffer.from(expected.slice("sha256:".length), "ascii");
+    return actual.byteLength === wanted.byteLength && timingSafeEqual(actual, wanted);
+}
+function boundedValue(value) {
+    return typeof value === "string" && value.length > 0 && !value.includes("\0") &&
+        Buffer.byteLength(value, "utf8") <= MAX_CALLBACK_VALUE_BYTES;
+}
+function parseStrictQuery(raw) {
+    const parsed = new Map();
+    const pairs = raw.split("&");
+    if (pairs.length !== 2)
+        return undefined;
+    for (const pair of pairs) {
+        const separator = pair.indexOf("=");
+        if (separator < 1)
+            return undefined;
+        const key = pair.slice(0, separator);
+        const encodedValue = pair.slice(separator + 1);
+        if ((key !== "state" && key !== "code" && key !== "error") || parsed.has(key) || !strictPercentEncoding(encodedValue))
+            return undefined;
+        let value;
+        try {
+            value = decodeURIComponent(encodedValue);
+        }
+        catch {
+            return undefined;
+        }
+        if (!boundedValue(value))
+            return undefined;
+        parsed.set(key, value);
+    }
+    return parsed;
+}
+function strictPercentEncoding(value) {
+    for (let index = 0; index < value.length; index += 1) {
+        if (value[index] !== "%")
+            continue;
+        if (index + 2 >= value.length || !/^[0-9A-Fa-f]{2}$/u.test(value.slice(index + 1, index + 3)))
+            return false;
+        index += 2;
+    }
+    return true;
+}
+function exactHostHeader(request, host, port) {
+    let hostCount = 0;
+    for (let index = 0; index < request.rawHeaders.length; index += 2) {
+        if (request.rawHeaders[index]?.toLowerCase() === "host")
+            hostCount += 1;
+    }
+    const expected = `${host === "::1" ? "[::1]" : host}:${port}`;
+    return hostCount === 1 && request.headers.host === expected;
+}
+function sameBoundLoopback(actual, expected) {
+    return actual === expected || (expected === "127.0.0.1" && actual === "::ffff:127.0.0.1");
+}
+function fixedResponse(response, status, body) {
+    response.writeHead(status, {
+        "cache-control": "no-store",
+        "content-type": "text/plain; charset=utf-8",
+        "referrer-policy": "no-referrer",
+        "x-content-type-options": "nosniff",
+    });
+    response.end(body);
+}
+function listen(server, port, host) {
+    return new Promise((resolve, reject) => {
+        const onError = (error) => { server.off("listening", onListening); reject(error); };
+        const onListening = () => { server.off("error", onError); resolve(); };
+        server.once("error", onError);
+        server.once("listening", onListening);
+        server.listen({ host, port, exclusive: true });
+    });
+}
+function closeServer(server) {
+    return new Promise((resolve) => {
+        server.closeAllConnections();
+        if (!server.listening) {
+            resolve();
+            return;
+        }
+        server.close(() => resolve());
+    });
+}
+function isAborted(signal) {
+    return signal?.aborted === true;
+}
+//# sourceMappingURL=callback-relay.js.map