@evalops/maestro 0.10.8 → 0.10.10

package/dist/oauth/openai-codex.js

@@ -0,0 +1,300 @@
+/**
+ * OpenAI Codex OAuth integration.
+ *
+ * This is intentionally separate from the OpenAI Platform OAuth flow. Codex
+ * uses the ChatGPT access token directly against the ChatGPT Codex backend,
+ * while the regular OpenAI provider exchanges the login for a Platform API key.
+ */
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { createServer, } from "node:http";
+import { createLogger } from "../utils/logger.js";
+import { saveOAuthCredentials } from "./storage.js";
+const logger = createLogger("oauth:openai-codex");
+const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+const ISSUER = "https://auth.openai.com";
+const AUTHORIZE_URL = `${ISSUER}/oauth/authorize`;
+const TOKEN_URL = `${ISSUER}/oauth/token`;
+const CALLBACK_PORT = 1455;
+const CALLBACK_HOST = "127.0.0.1";
+const REDIRECT_URI = `http://localhost:${CALLBACK_PORT}/auth/callback`;
+const CALLBACK_ORIGIN = `http://${CALLBACK_HOST}:${CALLBACK_PORT}`;
+const SCOPE = "openid profile email offline_access";
+const ORIGINATOR = "codex_cli_rs";
+const JWT_CLAIM_PATH = "https://api.openai.com/auth";
+const LOGIN_TIMEOUT_MS = 5 * 60 * 1000;
+function base64UrlEncode(buffer) {
+    return buffer
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/g, "");
+}
+function base64UrlDecode(value) {
+    const padded = `${value}${"=".repeat((4 - (value.length % 4)) % 4)}`;
+    return Buffer.from(padded.replace(/-/g, "+").replace(/_/g, "/"), "base64").toString("utf8");
+}
+function generatePkce() {
+    const verifier = base64UrlEncode(randomBytes(32));
+    const challenge = base64UrlEncode(createHash("sha256").update(verifier).digest());
+    return { verifier, challenge };
+}
+function createState() {
+    return base64UrlEncode(randomBytes(32));
+}
+function safeTimingEqual(a, b) {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    return left.length === right.length && timingSafeEqual(left, right);
+}
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+export function parseOpenAICodexAuthorizationInput(input) {
+    const value = input.trim();
+    if (!value)
+        return {};
+    try {
+        const url = new URL(value);
+        return {
+            code: url.searchParams.get("code") ?? undefined,
+            state: url.searchParams.get("state") ?? undefined,
+        };
+    }
+    catch {
+        // Not a full URL.
+    }
+    if (value.includes("#")) {
+        const [code, state] = value.split("#", 2);
+        return { code, state };
+    }
+    if (value.includes("code=")) {
+        const params = new URLSearchParams(value);
+        return {
+            code: params.get("code") ?? undefined,
+            state: params.get("state") ?? undefined,
+        };
+    }
+    return { code: value };
+}
+function decodeJwt(token) {
+    try {
+        const parts = token.split(".");
+        if (parts.length !== 3 || !parts[1])
+            return null;
+        return JSON.parse(base64UrlDecode(parts[1]));
+    }
+    catch {
+        return null;
+    }
+}
+export function extractOpenAICodexAccountId(accessToken) {
+    const payload = decodeJwt(accessToken);
+    const accountId = payload?.[JWT_CLAIM_PATH]?.chatgpt_account_id;
+    return typeof accountId === "string" && accountId.trim().length > 0
+        ? accountId.trim()
+        : null;
+}
+function buildAuthorizationUrl(state, challenge) {
+    const url = new URL(AUTHORIZE_URL);
+    url.searchParams.set("response_type", "code");
+    url.searchParams.set("client_id", CLIENT_ID);
+    url.searchParams.set("redirect_uri", REDIRECT_URI);
+    url.searchParams.set("scope", SCOPE);
+    url.searchParams.set("code_challenge", challenge);
+    url.searchParams.set("code_challenge_method", "S256");
+    url.searchParams.set("state", state);
+    url.searchParams.set("id_token_add_organizations", "true");
+    url.searchParams.set("codex_cli_simplified_flow", "true");
+    url.searchParams.set("originator", ORIGINATOR);
+    return url.toString();
+}
+async function exchangeAuthorizationCode(code, verifier) {
+    const response = await fetch(TOKEN_URL, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+            grant_type: "authorization_code",
+            client_id: CLIENT_ID,
+            code,
+            code_verifier: verifier,
+            redirect_uri: REDIRECT_URI,
+        }).toString(),
+    });
+    if (!response.ok) {
+        const text = await response.text().catch(() => "");
+        throw new Error(`OpenAI Codex token exchange failed (${response.status}): ${text}`);
+    }
+    const payload = (await response.json());
+    if (!payload.access_token || !payload.refresh_token) {
+        throw new Error("OpenAI Codex token response was missing OAuth tokens");
+    }
+    const accountId = extractOpenAICodexAccountId(payload.access_token);
+    if (!accountId) {
+        throw new Error("OpenAI Codex token response did not include account id");
+    }
+    return {
+        type: "oauth",
+        access: payload.access_token,
+        refresh: payload.refresh_token,
+        expires: Date.now() + (payload.expires_in ?? 3600) * 1000,
+        metadata: {
+            mode: "openai-codex",
+            accountId,
+            scopes: SCOPE.split(" "),
+        },
+    };
+}
+async function refreshAccessToken(refreshToken) {
+    const response = await fetch(TOKEN_URL, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+            grant_type: "refresh_token",
+            client_id: CLIENT_ID,
+            refresh_token: refreshToken,
+        }).toString(),
+    });
+    if (!response.ok) {
+        const text = await response.text().catch(() => "");
+        throw new Error(`OpenAI Codex token refresh failed (${response.status}): ${text}`);
+    }
+    const payload = (await response.json());
+    if (!payload.access_token || !payload.refresh_token) {
+        throw new Error("OpenAI Codex refresh response was missing OAuth tokens");
+    }
+    const accountId = extractOpenAICodexAccountId(payload.access_token);
+    if (!accountId) {
+        throw new Error("OpenAI Codex refresh response did not include account id");
+    }
+    return {
+        type: "oauth",
+        access: payload.access_token,
+        refresh: payload.refresh_token,
+        expires: Date.now() + (payload.expires_in ?? 3600) * 1000,
+        metadata: {
+            mode: "openai-codex",
+            accountId,
+            scopes: SCOPE.split(" "),
+        },
+    };
+}
+async function startCallbackServer(state) {
+    return new Promise((resolve) => {
+        let settleCode;
+        const codePromise = new Promise((codeResolve) => {
+            settleCode = codeResolve;
+        });
+        const server = createServer((req, res) => {
+            const reqUrl = new URL(req.url ?? "", CALLBACK_ORIGIN);
+            if (reqUrl.pathname !== "/auth/callback") {
+                res.writeHead(404, { "Content-Type": "text/html; charset=utf-8" });
+                res.end("<html><body><h1>Not Found</h1></body></html>");
+                return;
+            }
+            const error = reqUrl.searchParams.get("error");
+            const errorDescription = reqUrl.searchParams.get("error_description");
+            if (error) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(`<html><body><h1>Authentication Failed</h1><p>${escapeHtml(error)}</p><p>${escapeHtml(errorDescription ?? "")}</p></body></html>`);
+                settleCode(null);
+                return;
+            }
+            const code = reqUrl.searchParams.get("code");
+            const returnedState = reqUrl.searchParams.get("state");
+            if (!code || !returnedState || !safeTimingEqual(returnedState, state)) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end("<html><body><h1>Authentication Failed</h1><p>Invalid OAuth callback.</p></body></html>");
+                settleCode(null);
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+            res.end("<html><body><h1>Login Successful</h1><p>You can close this tab and return to Maestro.</p></body></html>");
+            settleCode(code);
+        });
+        server.once("error", (error) => {
+            logger.warn("OpenAI Codex OAuth callback server unavailable", {
+                code: error.code,
+                message: error.message,
+            });
+            settleCode(null);
+            resolve({ server: null, getCode: () => codePromise });
+        });
+        server.listen(CALLBACK_PORT, CALLBACK_HOST, () => {
+            resolve({ server, getCode: () => codePromise });
+        });
+    });
+}
+async function waitForPromptCode(onPromptCode, state) {
+    const input = await onPromptCode();
+    const parsed = parseOpenAICodexAuthorizationInput(input);
+    if (parsed.state && !safeTimingEqual(parsed.state, state)) {
+        throw new Error("State mismatch in OpenAI Codex OAuth callback");
+    }
+    return parsed.code ?? null;
+}
+export async function loginOpenAICodex(onAuthUrl, onPromptCode, onStatus) {
+    const { verifier, challenge } = generatePkce();
+    const state = createState();
+    const authUrl = buildAuthorizationUrl(state, challenge);
+    const callback = await startCallbackServer(state);
+    let timeout;
+    try {
+        onAuthUrl(authUrl);
+        onStatus?.(callback.server
+            ? "Complete OpenAI login in the browser, or paste the redirect URL/code if prompted."
+            : "Callback server unavailable. Paste the OpenAI redirect URL or authorization code.");
+        const timeoutPromise = new Promise((_, reject) => {
+            timeout = setTimeout(() => {
+                reject(new Error("OpenAI Codex OAuth login timed out"));
+            }, LOGIN_TIMEOUT_MS);
+        });
+        let code;
+        if (!callback.server && onPromptCode) {
+            code = await Promise.race([
+                waitForPromptCode(onPromptCode, state),
+                timeoutPromise,
+            ]);
+        }
+        else {
+            code = await Promise.race([callback.getCode(), timeoutPromise]);
+            if (!code && onPromptCode) {
+                code = await Promise.race([
+                    waitForPromptCode(onPromptCode, state),
+                    timeoutPromise,
+                ]);
+            }
+        }
+        if (!code) {
+            throw new Error(onPromptCode
+                ? "Missing OpenAI Codex authorization code"
+                : "OpenAI Codex OAuth did not receive a callback. Try again with a manual code prompt.");
+        }
+        onStatus?.("Exchanging OpenAI Codex authorization code...");
+        const credentials = await exchangeAuthorizationCode(code, verifier);
+        saveOAuthCredentials("openai-codex", credentials);
+        onStatus?.("OpenAI Codex credentials saved.");
+    }
+    finally {
+        if (timeout) {
+            clearTimeout(timeout);
+        }
+        callback.server?.close();
+    }
+}
+export async function refreshOpenAICodexToken(refreshToken, metadata) {
+    const refreshed = await refreshAccessToken(refreshToken);
+    return {
+        ...refreshed,
+        metadata: {
+            ...(metadata ?? {}),
+            ...refreshed.metadata,
+            mode: "openai-codex",
+        },
+    };
+}
+//# sourceMappingURL=openai-codex.js.map

package/dist/oauth/openai-codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-codex.js","sourceRoot":"","sources":["../../src/oauth/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAIN,YAAY,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAyB,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAE3E,MAAM,MAAM,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;AAElD,MAAM,SAAS,GAAG,8BAA8B,CAAC;AACjD,MAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,MAAM,aAAa,GAAG,GAAG,MAAM,kBAAkB,CAAC;AAClD,MAAM,SAAS,GAAG,GAAG,MAAM,cAAc,CAAC;AAC1C,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,MAAM,YAAY,GAAG,oBAAoB,aAAa,gBAAgB,CAAC;AACvE,MAAM,eAAe,GAAG,UAAU,aAAa,IAAI,aAAa,EAAE,CAAC;AACnE,MAAM,KAAK,GAAG,qCAAqC,CAAC;AACpD,MAAM,UAAU,GAAG,cAAc,CAAC;AAClC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AACrD,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAiBvC,SAAS,eAAe,CAAC,MAAc;IACtC,OAAO,MAAM;SACX,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACrC,MAAM,MAAM,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACrE,OAAO,MAAM,CAAC,IAAI,CACjB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAC5C,QAAQ,CACR,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,YAAY;IACpB,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,eAAe,CAChC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAC9C,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,WAAW;IACnB,OAAO,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,KAAK;SACV,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAa;IAI/D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO;YACN,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;YAC/C,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;SACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,kBAAkB;IACnB,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;YACrC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;SACvC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC/B,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAoB,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,WAAmB;IAEnB,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IAChE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAClE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE;QAClB,CAAC,CAAC,IAAI,CAAC;AACT,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,SAAiB;IAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;IAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,IAAY,EACZ,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACzB,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,SAAS;YACpB,IAAI;YACJ,aAAa,EAAE,QAAQ;YACvB,YAAY,EAAE,YAAY;SAC1B,CAAC,CAAC,QAAQ,EAAE;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CACd,uCAAuC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAClE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;IACzD,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACN,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,OAAO,CAAC,YAAY;QAC5B,OAAO,EAAE,OAAO,CAAC,aAAa;QAC9B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI;QACzD,QAAQ,EAAE;YACT,IAAI,EAAE,cAAc;YACpB,SAAS;YACT,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;SACxB;KACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAChC,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACzB,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,SAAS;YACpB,aAAa,EAAE,YAAY;SAC3B,CAAC,CAAC,QAAQ,EAAE;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CACd,sCAAsC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CACjE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;IACzD,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO;QACN,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,OAAO,CAAC,YAAY;QAC5B,OAAO,EAAE,OAAO,CAAC,aAAa;QAC9B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI;QACzD,QAAQ,EAAE;YACT,IAAI,EAAE,cAAc;YACpB,SAAS;YACT,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;SACxB;KACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,KAAa;IAI/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,IAAI,UAAyC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,OAAO,CAAgB,CAAC,WAAW,EAAE,EAAE;YAC9D,UAAU,GAAG,WAAW,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAC1C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;gBACxD,OAAO;YACR,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACtE,IAAI,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CACN,gDAAgD,UAAU,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,gBAAgB,IAAI,EAAE,CAAC,oBAAoB,CACjI,CAAC;gBACF,UAAU,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO;YACR,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CACN,wFAAwF,CACxF,CAAC;gBACF,UAAU,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO;YACR,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CACN,yGAAyG,CACzG,CAAC;YACF,UAAU,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACrD,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAC7D,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,GAAG,EAAE;YAChD,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC/B,YAAmC,EACnC,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,SAAgC,EAChC,YAAoC,EACpC,QAAmC;IAEnC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,OAAkD,CAAC;IAEvD,IAAI,CAAC;QACJ,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,QAAQ,EAAE,CACT,QAAQ,CAAC,MAAM;YACd,CAAC,CAAC,mFAAmF;YACrF,CAAC,CAAC,mFAAmF,CACtF,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YACvD,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzB,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;YACzD,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,IAAmB,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YACtC,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBACzB,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC;gBACtC,cAAc;aACd,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;gBAC3B,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;oBACzB,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC;oBACtC,cAAc;iBACd,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACd,YAAY;gBACX,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,qFAAqF,CACxF,CAAC;QACH,CAAC;QAED,QAAQ,EAAE,CAAC,+CAA+C,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpE,oBAAoB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAClD,QAAQ,EAAE,CAAC,iCAAiC,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACV,IAAI,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,YAAoB,EACpB,QAAkC;IAElC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACzD,OAAO;QACN,GAAG,SAAS;QACZ,QAAQ,EAAE;YACT,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;YACnB,GAAG,SAAS,CAAC,QAAQ;YACrB,IAAI,EAAE,cAAc;SACpB;KACD,CAAC;AACH,CAAC","sourcesContent":["/**\n * OpenAI Codex OAuth integration.\n *\n * This is intentionally separate from the OpenAI Platform OAuth flow. Codex\n * uses the ChatGPT access token directly against the ChatGPT Codex backend,\n * while the regular OpenAI provider exchanges the login for a Platform API key.\n */\n\nimport { createHash, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport {\n\ttype IncomingMessage,\n\ttype Server,\n\ttype ServerResponse,\n\tcreateServer,\n} from \"node:http\";\nimport { createLogger } from \"../utils/logger.js\";\nimport { type OAuthCredentials, saveOAuthCredentials } from \"./storage.js\";\n\nconst logger = createLogger(\"oauth:openai-codex\");\n\nconst CLIENT_ID = \"app_EMoamEEZ73f0CkXaXp7hrann\";\nconst ISSUER = \"https://auth.openai.com\";\nconst AUTHORIZE_URL = `${ISSUER}/oauth/authorize`;\nconst TOKEN_URL = `${ISSUER}/oauth/token`;\nconst CALLBACK_PORT = 1455;\nconst CALLBACK_HOST = \"127.0.0.1\";\nconst REDIRECT_URI = `http://localhost:${CALLBACK_PORT}/auth/callback`;\nconst CALLBACK_ORIGIN = `http://${CALLBACK_HOST}:${CALLBACK_PORT}`;\nconst SCOPE = \"openid profile email offline_access\";\nconst ORIGINATOR = \"codex_cli_rs\";\nconst JWT_CLAIM_PATH = \"https://api.openai.com/auth\";\nconst LOGIN_TIMEOUT_MS = 5 * 60 * 1000;\n\ninterface TokenResponse {\n\taccess_token?: string;\n\trefresh_token?: string;\n\texpires_in?: number;\n\terror?: string;\n\terror_description?: string;\n}\n\ninterface CodexJwtPayload {\n\t[JWT_CLAIM_PATH]?: {\n\t\tchatgpt_account_id?: string;\n\t};\n\t[key: string]: unknown;\n}\n\nfunction base64UrlEncode(buffer: Buffer): string {\n\treturn buffer\n\t\t.toString(\"base64\")\n\t\t.replace(/\\+/g, \"-\")\n\t\t.replace(/\\//g, \"_\")\n\t\t.replace(/=+$/g, \"\");\n}\n\nfunction base64UrlDecode(value: string): string {\n\tconst padded = `${value}${\"=\".repeat((4 - (value.length % 4)) % 4)}`;\n\treturn Buffer.from(\n\t\tpadded.replace(/-/g, \"+\").replace(/_/g, \"/\"),\n\t\t\"base64\",\n\t).toString(\"utf8\");\n}\n\nfunction generatePkce(): { verifier: string; challenge: string } {\n\tconst verifier = base64UrlEncode(randomBytes(32));\n\tconst challenge = base64UrlEncode(\n\t\tcreateHash(\"sha256\").update(verifier).digest(),\n\t);\n\treturn { verifier, challenge };\n}\n\nfunction createState(): string {\n\treturn base64UrlEncode(randomBytes(32));\n}\n\nfunction safeTimingEqual(a: string, b: string): boolean {\n\tconst left = Buffer.from(a);\n\tconst right = Buffer.from(b);\n\treturn left.length === right.length && timingSafeEqual(left, right);\n}\n\nfunction escapeHtml(value: string): string {\n\treturn value\n\t\t.replace(/&/g, \"&amp;\")\n\t\t.replace(/</g, \"&lt;\")\n\t\t.replace(/>/g, \"&gt;\")\n\t\t.replace(/\"/g, \"&quot;\")\n\t\t.replace(/'/g, \"&#39;\");\n}\n\nexport function parseOpenAICodexAuthorizationInput(input: string): {\n\tcode?: string;\n\tstate?: string;\n} {\n\tconst value = input.trim();\n\tif (!value) return {};\n\n\ttry {\n\t\tconst url = new URL(value);\n\t\treturn {\n\t\t\tcode: url.searchParams.get(\"code\") ?? undefined,\n\t\t\tstate: url.searchParams.get(\"state\") ?? undefined,\n\t\t};\n\t} catch {\n\t\t// Not a full URL.\n\t}\n\n\tif (value.includes(\"#\")) {\n\t\tconst [code, state] = value.split(\"#\", 2);\n\t\treturn { code, state };\n\t}\n\n\tif (value.includes(\"code=\")) {\n\t\tconst params = new URLSearchParams(value);\n\t\treturn {\n\t\t\tcode: params.get(\"code\") ?? undefined,\n\t\t\tstate: params.get(\"state\") ?? undefined,\n\t\t};\n\t}\n\n\treturn { code: value };\n}\n\nfunction decodeJwt(token: string): CodexJwtPayload | null {\n\ttry {\n\t\tconst parts = token.split(\".\");\n\t\tif (parts.length !== 3 || !parts[1]) return null;\n\t\treturn JSON.parse(base64UrlDecode(parts[1])) as CodexJwtPayload;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function extractOpenAICodexAccountId(\n\taccessToken: string,\n): string | null {\n\tconst payload = decodeJwt(accessToken);\n\tconst accountId = payload?.[JWT_CLAIM_PATH]?.chatgpt_account_id;\n\treturn typeof accountId === \"string\" && accountId.trim().length > 0\n\t\t? accountId.trim()\n\t\t: null;\n}\n\nfunction buildAuthorizationUrl(state: string, challenge: string): string {\n\tconst url = new URL(AUTHORIZE_URL);\n\turl.searchParams.set(\"response_type\", \"code\");\n\turl.searchParams.set(\"client_id\", CLIENT_ID);\n\turl.searchParams.set(\"redirect_uri\", REDIRECT_URI);\n\turl.searchParams.set(\"scope\", SCOPE);\n\turl.searchParams.set(\"code_challenge\", challenge);\n\turl.searchParams.set(\"code_challenge_method\", \"S256\");\n\turl.searchParams.set(\"state\", state);\n\turl.searchParams.set(\"id_token_add_organizations\", \"true\");\n\turl.searchParams.set(\"codex_cli_simplified_flow\", \"true\");\n\turl.searchParams.set(\"originator\", ORIGINATOR);\n\treturn url.toString();\n}\n\nasync function exchangeAuthorizationCode(\n\tcode: string,\n\tverifier: string,\n): Promise<OAuthCredentials> {\n\tconst response = await fetch(TOKEN_URL, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n\t\tbody: new URLSearchParams({\n\t\t\tgrant_type: \"authorization_code\",\n\t\t\tclient_id: CLIENT_ID,\n\t\t\tcode,\n\t\t\tcode_verifier: verifier,\n\t\t\tredirect_uri: REDIRECT_URI,\n\t\t}).toString(),\n\t});\n\n\tif (!response.ok) {\n\t\tconst text = await response.text().catch(() => \"\");\n\t\tthrow new Error(\n\t\t\t`OpenAI Codex token exchange failed (${response.status}): ${text}`,\n\t\t);\n\t}\n\n\tconst payload = (await response.json()) as TokenResponse;\n\tif (!payload.access_token || !payload.refresh_token) {\n\t\tthrow new Error(\"OpenAI Codex token response was missing OAuth tokens\");\n\t}\n\n\tconst accountId = extractOpenAICodexAccountId(payload.access_token);\n\tif (!accountId) {\n\t\tthrow new Error(\"OpenAI Codex token response did not include account id\");\n\t}\n\n\treturn {\n\t\ttype: \"oauth\",\n\t\taccess: payload.access_token,\n\t\trefresh: payload.refresh_token,\n\t\texpires: Date.now() + (payload.expires_in ?? 3600) * 1000,\n\t\tmetadata: {\n\t\t\tmode: \"openai-codex\",\n\t\t\taccountId,\n\t\t\tscopes: SCOPE.split(\" \"),\n\t\t},\n\t};\n}\n\nasync function refreshAccessToken(\n\trefreshToken: string,\n): Promise<OAuthCredentials> {\n\tconst response = await fetch(TOKEN_URL, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n\t\tbody: new URLSearchParams({\n\t\t\tgrant_type: \"refresh_token\",\n\t\t\tclient_id: CLIENT_ID,\n\t\t\trefresh_token: refreshToken,\n\t\t}).toString(),\n\t});\n\n\tif (!response.ok) {\n\t\tconst text = await response.text().catch(() => \"\");\n\t\tthrow new Error(\n\t\t\t`OpenAI Codex token refresh failed (${response.status}): ${text}`,\n\t\t);\n\t}\n\n\tconst payload = (await response.json()) as TokenResponse;\n\tif (!payload.access_token || !payload.refresh_token) {\n\t\tthrow new Error(\"OpenAI Codex refresh response was missing OAuth tokens\");\n\t}\n\n\tconst accountId = extractOpenAICodexAccountId(payload.access_token);\n\tif (!accountId) {\n\t\tthrow new Error(\"OpenAI Codex refresh response did not include account id\");\n\t}\n\n\treturn {\n\t\ttype: \"oauth\",\n\t\taccess: payload.access_token,\n\t\trefresh: payload.refresh_token,\n\t\texpires: Date.now() + (payload.expires_in ?? 3600) * 1000,\n\t\tmetadata: {\n\t\t\tmode: \"openai-codex\",\n\t\t\taccountId,\n\t\t\tscopes: SCOPE.split(\" \"),\n\t\t},\n\t};\n}\n\nasync function startCallbackServer(state: string): Promise<{\n\tserver: Server | null;\n\tgetCode: () => Promise<string | null>;\n}> {\n\treturn new Promise((resolve) => {\n\t\tlet settleCode: (code: string | null) => void;\n\t\tconst codePromise = new Promise<string | null>((codeResolve) => {\n\t\t\tsettleCode = codeResolve;\n\t\t});\n\n\t\tconst server = createServer((req: IncomingMessage, res: ServerResponse) => {\n\t\t\tconst reqUrl = new URL(req.url ?? \"\", CALLBACK_ORIGIN);\n\t\t\tif (reqUrl.pathname !== \"/auth/callback\") {\n\t\t\t\tres.writeHead(404, { \"Content-Type\": \"text/html; charset=utf-8\" });\n\t\t\t\tres.end(\"<html><body><h1>Not Found</h1></body></html>\");\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst error = reqUrl.searchParams.get(\"error\");\n\t\t\tconst errorDescription = reqUrl.searchParams.get(\"error_description\");\n\t\t\tif (error) {\n\t\t\t\tres.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n\t\t\t\tres.end(\n\t\t\t\t\t`<html><body><h1>Authentication Failed</h1><p>${escapeHtml(error)}</p><p>${escapeHtml(errorDescription ?? \"\")}</p></body></html>`,\n\t\t\t\t);\n\t\t\t\tsettleCode(null);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst code = reqUrl.searchParams.get(\"code\");\n\t\t\tconst returnedState = reqUrl.searchParams.get(\"state\");\n\t\t\tif (!code || !returnedState || !safeTimingEqual(returnedState, state)) {\n\t\t\t\tres.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n\t\t\t\tres.end(\n\t\t\t\t\t\"<html><body><h1>Authentication Failed</h1><p>Invalid OAuth callback.</p></body></html>\",\n\t\t\t\t);\n\t\t\t\tsettleCode(null);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tres.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n\t\t\tres.end(\n\t\t\t\t\"<html><body><h1>Login Successful</h1><p>You can close this tab and return to Maestro.</p></body></html>\",\n\t\t\t);\n\t\t\tsettleCode(code);\n\t\t});\n\n\t\tserver.once(\"error\", (error: NodeJS.ErrnoException) => {\n\t\t\tlogger.warn(\"OpenAI Codex OAuth callback server unavailable\", {\n\t\t\t\tcode: error.code,\n\t\t\t\tmessage: error.message,\n\t\t\t});\n\t\t\tsettleCode(null);\n\t\t\tresolve({ server: null, getCode: () => codePromise });\n\t\t});\n\n\t\tserver.listen(CALLBACK_PORT, CALLBACK_HOST, () => {\n\t\t\tresolve({ server, getCode: () => codePromise });\n\t\t});\n\t});\n}\n\nasync function waitForPromptCode(\n\tonPromptCode: () => Promise<string>,\n\tstate: string,\n): Promise<string | null> {\n\tconst input = await onPromptCode();\n\tconst parsed = parseOpenAICodexAuthorizationInput(input);\n\tif (parsed.state && !safeTimingEqual(parsed.state, state)) {\n\t\tthrow new Error(\"State mismatch in OpenAI Codex OAuth callback\");\n\t}\n\treturn parsed.code ?? null;\n}\n\nexport async function loginOpenAICodex(\n\tonAuthUrl: (url: string) => void,\n\tonPromptCode?: () => Promise<string>,\n\tonStatus?: (status: string) => void,\n): Promise<void> {\n\tconst { verifier, challenge } = generatePkce();\n\tconst state = createState();\n\tconst authUrl = buildAuthorizationUrl(state, challenge);\n\tconst callback = await startCallbackServer(state);\n\tlet timeout: ReturnType<typeof setTimeout> | undefined;\n\n\ttry {\n\t\tonAuthUrl(authUrl);\n\t\tonStatus?.(\n\t\t\tcallback.server\n\t\t\t\t? \"Complete OpenAI login in the browser, or paste the redirect URL/code if prompted.\"\n\t\t\t\t: \"Callback server unavailable. Paste the OpenAI redirect URL or authorization code.\",\n\t\t);\n\n\t\tconst timeoutPromise = new Promise<never>((_, reject) => {\n\t\t\ttimeout = setTimeout(() => {\n\t\t\t\treject(new Error(\"OpenAI Codex OAuth login timed out\"));\n\t\t\t}, LOGIN_TIMEOUT_MS);\n\t\t});\n\n\t\tlet code: string | null;\n\t\tif (!callback.server && onPromptCode) {\n\t\t\tcode = await Promise.race([\n\t\t\t\twaitForPromptCode(onPromptCode, state),\n\t\t\t\ttimeoutPromise,\n\t\t\t]);\n\t\t} else {\n\t\t\tcode = await Promise.race([callback.getCode(), timeoutPromise]);\n\t\t\tif (!code && onPromptCode) {\n\t\t\t\tcode = await Promise.race([\n\t\t\t\t\twaitForPromptCode(onPromptCode, state),\n\t\t\t\t\ttimeoutPromise,\n\t\t\t\t]);\n\t\t\t}\n\t\t}\n\n\t\tif (!code) {\n\t\t\tthrow new Error(\n\t\t\t\tonPromptCode\n\t\t\t\t\t? \"Missing OpenAI Codex authorization code\"\n\t\t\t\t\t: \"OpenAI Codex OAuth did not receive a callback. Try again with a manual code prompt.\",\n\t\t\t);\n\t\t}\n\n\t\tonStatus?.(\"Exchanging OpenAI Codex authorization code...\");\n\t\tconst credentials = await exchangeAuthorizationCode(code, verifier);\n\t\tsaveOAuthCredentials(\"openai-codex\", credentials);\n\t\tonStatus?.(\"OpenAI Codex credentials saved.\");\n\t} finally {\n\t\tif (timeout) {\n\t\t\tclearTimeout(timeout);\n\t\t}\n\t\tcallback.server?.close();\n\t}\n}\n\nexport async function refreshOpenAICodexToken(\n\trefreshToken: string,\n\tmetadata?: Record<string, unknown>,\n): Promise<OAuthCredentials> {\n\tconst refreshed = await refreshAccessToken(refreshToken);\n\treturn {\n\t\t...refreshed,\n\t\tmetadata: {\n\t\t\t...(metadata ?? {}),\n\t\t\t...refreshed.metadata,\n\t\t\tmode: \"openai-codex\",\n\t\t},\n\t};\n}\n"]}

package/dist/opentelemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opentelemetry.d.ts","sourceRoot":"","sources":["../src/opentelemetry.ts"],"names":[],"mappings":"AAkCA,eAAO,MAAM,sBAAsB,QAAO,OAmBzC,CAAC;AAEF,eAAO,MAAM,kBAAkB,2CAAoC,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,sBAAsB,IAAI,mBAAmB,CAsC5D;AAED,wBAAsB,iBAAiB,CACtC,WAAW,SAAa,GACtB,OAAO,CAAC,IAAI,CAAC,CAiEf"}
+{"version":3,"file":"opentelemetry.d.ts","sourceRoot":"","sources":["../src/opentelemetry.ts"],"names":[],"mappings":"AA0CA,eAAO,MAAM,sBAAsB,QAAO,OAmBzC,CAAC;AAEF,eAAO,MAAM,kBAAkB,2CAAoC,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,sBAAsB,IAAI,mBAAmB,CAsC5D;AAED,wBAAsB,iBAAiB,CACtC,WAAW,SAAa,GACtB,OAAO,CAAC,IAAI,CAAC,CAiEf"}

package/dist/opentelemetry.js

@@ -1,9 +1,9 @@
+import { createRequire } from "node:module";
 import { DiagConsoleLogger, DiagLogLevel, diag, trace, } from "@opentelemetry/api";
 import { getNodeAutoInstrumentations } from "@opentelemetry/auto-instrumentations-node";
 import { resourceFromAttributes } from "@opentelemetry/resources";
 import { NodeSDK } from "@opentelemetry/sdk-node";
 import { SEMRESATTRS_DEPLOYMENT_ENVIRONMENT, SEMRESATTRS_SERVICE_NAME, SEMRESATTRS_SERVICE_VERSION, } from "@opentelemetry/semantic-conventions";
-import { getPackageVersion } from "./package-metadata.js";
 let sdkStartPromise = null;
 let sdkStarted = false;
 let handlersRegistered = false;
@@ -16,7 +16,14 @@ const packageVersion = (() => {
         if (cached) {
             return cached;
         }
-        cached = getPackageVersion();
+        try {
+            const packageJson = createRequire(import.meta.url)("../package.json");
+            const version = packageJson.version;
+            cached = typeof version === "string" ? version : "unknown";
+        }
+        catch (error) {
+            cached = process.env.MAESTRO_VERSION ?? "unknown";
+        }
         return cached;
     };
 })();

package/dist/opentelemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"opentelemetry.js","sourceRoot":"","sources":["../src/opentelemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,iBAAiB,EACjB,YAAY,EACZ,IAAI,EACJ,KAAK,GACL,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EACN,kCAAkC,EAClC,wBAAwB,EACxB,2BAA2B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,IAAI,eAAe,GAAyB,IAAI,CAAC;AACjD,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAC/B,IAAI,qBAAqB,GAAkB,IAAI,CAAC;AAChD,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAC5C,IAAI,WAAW,GAAmB,IAAI,CAAC;AAEvC,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,OAAO,GAAW,EAAE;QACnB,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC;QACf,CAAC;QACD,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC;IACf,CAAC,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAY,EAAE;IACnD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACvD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpD,MAAM,mBAAmB,GACxB,CAAC,aAAa,IAAI,aAAa,KAAK,MAAM,CAAC;QAC3C,CAAC,eAAe,IAAI,eAAe,KAAK,MAAM,CAAC;QAC/C,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,CAAC,CAAC;IAE3C,OAAO,eAAe,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AAepE,MAAM,UAAU,sBAAsB;IACrC,MAAM,OAAO,GAAG,sBAAsB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC7D,MAAM,cAAc,GACnB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,eAAe,GACpB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,YAAY,GACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,OAAO,GACZ,iBAAiB;QACjB,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,0BAA0B,CAAC;IAE5B,MAAM,MAAM,GAAG,OAAO;QACrB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG;YACjC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,wBAAwB;QAC3B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG;YACjC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,6BAA6B,CAAC;IAElC,OAAO;QACN,OAAO;QACP,MAAM;QACN,WAAW,EACV,qBAAqB;YACrB,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACrC,UAAU;QACX,UAAU;QACV,YAAY;QACZ,cAAc;QACd,eAAe;QACf,YAAY;QACZ,mBAAmB,EAAE,OAAO;QAC5B,OAAO;KACP,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,WAAW,GAAG,UAAU;IAExB,IAAI,eAAe,EAAE,CAAC;QACrB,OAAO,eAAe,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;QAC/B,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,IAAI,iBAAiB,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAE5D,MAAM,mBAAmB,GACxB,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,WAAW,CAAC;IACtD,qBAAqB,GAAG,mBAAmB,CAAC;IAE5C,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACnE,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACtD,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5C,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACrD,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACvC,CAAC,wBAAwB,CAAC,EAAE,mBAAmB;QAC/C,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE;QAC/C,CAAC,kCAAkC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;KAC3E,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC;QACvB,QAAQ;QACR,gBAAgB,EAAE,CAAC,2BAA2B,EAAE,CAAC;KACjD,CAAC,CAAC;IACH,WAAW,GAAG,GAAG,CAAC;IAClB,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAC7C,IAAI,CAAC;YACJ,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,UAAU,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACR,8DAA8D;QAC/D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzB,kBAAkB,GAAG,IAAI,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC;gBACJ,IAAI,WAAW,EAAE,CAAC;oBACjB,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC9B,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,2BAA2B;YAC5B,CAAC;QACF,CAAC,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;YAC/B,KAAK,QAAQ,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC3B,KAAK,QAAQ,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC5B,KAAK,QAAQ,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,eAAe,CAAC;AACxB,CAAC","sourcesContent":["import {\n\tDiagConsoleLogger,\n\tDiagLogLevel,\n\tdiag,\n\ttrace,\n} from \"@opentelemetry/api\";\nimport { getNodeAutoInstrumentations } from \"@opentelemetry/auto-instrumentations-node\";\nimport { resourceFromAttributes } from \"@opentelemetry/resources\";\nimport { NodeSDK } from \"@opentelemetry/sdk-node\";\nimport {\n\tSEMRESATTRS_DEPLOYMENT_ENVIRONMENT,\n\tSEMRESATTRS_SERVICE_NAME,\n\tSEMRESATTRS_SERVICE_VERSION,\n} from \"@opentelemetry/semantic-conventions\";\nimport { getPackageVersion } from \"./package-metadata.js\";\n\nlet sdkStartPromise: Promise<void> | null = null;\nlet sdkStarted = false;\nlet handlersRegistered = false;\nlet configuredServiceName: string | null = null;\nlet configuredSampler: string | null = null;\nlet sdkInstance: NodeSDK | null = null;\n\nconst packageVersion = (() => {\n\tlet cached: string | null = null;\n\treturn (): string => {\n\t\tif (cached) {\n\t\t\treturn cached;\n\t\t}\n\t\tcached = getPackageVersion();\n\t\treturn cached;\n\t};\n})();\n\nexport const isOpenTelemetryEnabled = (): boolean => {\n\tif (process.env.MAESTRO_OTEL === \"0\") {\n\t\treturn false;\n\t}\n\n\tif (process.env.MAESTRO_OTEL === \"1\") {\n\t\treturn true;\n\t}\n\n\tconst hasOtlpEndpoint = Boolean(process.env.OTEL_EXPORTER_OTLP_ENDPOINT);\n\tconst traceExporter = process.env.OTEL_TRACES_EXPORTER;\n\tconst metricsExporter = process.env.OTEL_METRICS_EXPORTER;\n\tconst logsExporter = process.env.OTEL_LOGS_EXPORTER;\n\tconst hasExplicitExporter =\n\t\t(traceExporter && traceExporter !== \"none\") ||\n\t\t(metricsExporter && metricsExporter !== \"none\") ||\n\t\t(logsExporter && logsExporter !== \"none\");\n\n\treturn hasOtlpEndpoint || Boolean(hasExplicitExporter);\n};\n\nexport const getTelemetryTracer = () => trace.getTracer(\"composer\");\n\nexport interface OpenTelemetryStatus {\n\tenabled: boolean;\n\treason: string;\n\tserviceName: string;\n\tsdkStarted: boolean;\n\totlpEndpoint?: string;\n\ttracesExporter?: string;\n\tmetricsExporter?: string;\n\tlogsExporter?: string;\n\tautoInstrumentation: boolean;\n\tsampler?: string;\n}\n\nexport function getOpenTelemetryStatus(): OpenTelemetryStatus {\n\tconst enabled = isOpenTelemetryEnabled();\n\tconst otlpEndpoint = process.env.OTEL_EXPORTER_OTLP_ENDPOINT;\n\tconst tracesExporter =\n\t\tprocess.env.OTEL_TRACES_EXPORTER || (otlpEndpoint ? \"otlp\" : \"default\");\n\tconst metricsExporter =\n\t\tprocess.env.OTEL_METRICS_EXPORTER || (otlpEndpoint ? \"otlp\" : \"default\");\n\tconst logsExporter =\n\t\tprocess.env.OTEL_LOGS_EXPORTER || (otlpEndpoint ? \"otlp\" : \"default\");\n\tconst sampler =\n\t\tconfiguredSampler ||\n\t\tprocess.env.OTEL_TRACES_SAMPLER ||\n\t\tprocess.env.MAESTRO_OTEL_SAMPLER ||\n\t\t\"parentbased_traceidratio\";\n\n\tconst reason = enabled\n\t\t? process.env.MAESTRO_OTEL === \"1\"\n\t\t\t? \"MAESTRO_OTEL=1\"\n\t\t\t: \"OTEL exporter detected\"\n\t\t: process.env.MAESTRO_OTEL === \"0\"\n\t\t\t? \"MAESTRO_OTEL=0\"\n\t\t\t: \"no OTEL exporter configured\";\n\n\treturn {\n\t\tenabled,\n\t\treason,\n\t\tserviceName:\n\t\t\tconfiguredServiceName ||\n\t\t\tprocess.env.MAESTRO_OTEL_SERVICE_NAME ||\n\t\t\t\"composer\",\n\t\tsdkStarted,\n\t\totlpEndpoint,\n\t\ttracesExporter,\n\t\tmetricsExporter,\n\t\tlogsExporter,\n\t\tautoInstrumentation: enabled,\n\t\tsampler,\n\t};\n}\n\nexport async function initOpenTelemetry(\n\tserviceName = \"composer\",\n): Promise<void> {\n\tif (sdkStartPromise) {\n\t\treturn sdkStartPromise;\n\t}\n\tif (!isOpenTelemetryEnabled()) {\n\t\tsdkStartPromise = Promise.resolve();\n\t\treturn sdkStartPromise;\n\t}\n\n\tdiag.setLogger(new DiagConsoleLogger(), DiagLogLevel.ERROR);\n\n\tconst resolvedServiceName =\n\t\tprocess.env.MAESTRO_OTEL_SERVICE_NAME || serviceName;\n\tconfiguredServiceName = resolvedServiceName;\n\n\tif (process.env.MAESTRO_OTEL_SAMPLER && !process.env.OTEL_TRACES_SAMPLER) {\n\t\tprocess.env.OTEL_TRACES_SAMPLER = process.env.MAESTRO_OTEL_SAMPLER;\n\t\tconfiguredSampler = process.env.MAESTRO_OTEL_SAMPLER;\n\t} else if (process.env.OTEL_TRACES_SAMPLER) {\n\t\tconfiguredSampler = process.env.OTEL_TRACES_SAMPLER;\n\t}\n\tconst resource = resourceFromAttributes({\n\t\t[SEMRESATTRS_SERVICE_NAME]: resolvedServiceName,\n\t\t[SEMRESATTRS_SERVICE_VERSION]: packageVersion(),\n\t\t[SEMRESATTRS_DEPLOYMENT_ENVIRONMENT]: process.env.NODE_ENV ?? \"development\",\n\t});\n\n\tconst sdk = new NodeSDK({\n\t\tresource,\n\t\tinstrumentations: [getNodeAutoInstrumentations()],\n\t});\n\tsdkInstance = sdk;\n\tsdkStartPromise = Promise.resolve().then(() => {\n\t\ttry {\n\t\t\tsdk.start();\n\t\t\tsdkStarted = true;\n\t\t} catch {\n\t\t\t// If OTEL boot fails, continue without blocking CLI/Web usage\n\t\t}\n\t});\n\n\tif (!handlersRegistered) {\n\t\thandlersRegistered = true;\n\t\tconst shutdown = async () => {\n\t\t\ttry {\n\t\t\t\tif (sdkInstance) {\n\t\t\t\t\tawait sdkInstance.shutdown();\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// Ignore shutdown failures\n\t\t\t}\n\t\t};\n\n\t\tprocess.once(\"beforeExit\", () => {\n\t\t\tvoid shutdown();\n\t\t});\n\t\tprocess.once(\"SIGINT\", () => {\n\t\t\tvoid shutdown();\n\t\t});\n\t\tprocess.once(\"SIGTERM\", () => {\n\t\t\tvoid shutdown();\n\t\t});\n\t}\n\n\treturn sdkStartPromise;\n}\n"]}
+{"version":3,"file":"opentelemetry.js","sourceRoot":"","sources":["../src/opentelemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACN,iBAAiB,EACjB,YAAY,EACZ,IAAI,EACJ,KAAK,GACL,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EACN,kCAAkC,EAClC,wBAAwB,EACxB,2BAA2B,GAC3B,MAAM,qCAAqC,CAAC;AAE7C,IAAI,eAAe,GAAyB,IAAI,CAAC;AACjD,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAC/B,IAAI,qBAAqB,GAAkB,IAAI,CAAC;AAChD,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAC5C,IAAI,WAAW,GAAmB,IAAI,CAAC;AAEvC,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,OAAO,GAAW,EAAE;QACnB,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAEnE,CAAC;YACF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;YACpC,MAAM,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAY,EAAE;IACnD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACvD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpD,MAAM,mBAAmB,GACxB,CAAC,aAAa,IAAI,aAAa,KAAK,MAAM,CAAC;QAC3C,CAAC,eAAe,IAAI,eAAe,KAAK,MAAM,CAAC;QAC/C,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,CAAC,CAAC;IAE3C,OAAO,eAAe,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AAepE,MAAM,UAAU,sBAAsB;IACrC,MAAM,OAAO,GAAG,sBAAsB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC7D,MAAM,cAAc,GACnB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,eAAe,GACpB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,YAAY,GACjB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,OAAO,GACZ,iBAAiB;QACjB,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,0BAA0B,CAAC;IAE5B,MAAM,MAAM,GAAG,OAAO;QACrB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG;YACjC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,wBAAwB;QAC3B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG;YACjC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,6BAA6B,CAAC;IAElC,OAAO;QACN,OAAO;QACP,MAAM;QACN,WAAW,EACV,qBAAqB;YACrB,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACrC,UAAU;QACX,UAAU;QACV,YAAY;QACZ,cAAc;QACd,eAAe;QACf,YAAY;QACZ,mBAAmB,EAAE,OAAO;QAC5B,OAAO;KACP,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,WAAW,GAAG,UAAU;IAExB,IAAI,eAAe,EAAE,CAAC;QACrB,OAAO,eAAe,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;QAC/B,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,IAAI,iBAAiB,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAE5D,MAAM,mBAAmB,GACxB,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,WAAW,CAAC;IACtD,qBAAqB,GAAG,mBAAmB,CAAC;IAE5C,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACnE,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACtD,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5C,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACrD,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACvC,CAAC,wBAAwB,CAAC,EAAE,mBAAmB;QAC/C,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE;QAC/C,CAAC,kCAAkC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;KAC3E,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC;QACvB,QAAQ;QACR,gBAAgB,EAAE,CAAC,2BAA2B,EAAE,CAAC;KACjD,CAAC,CAAC;IACH,WAAW,GAAG,GAAG,CAAC;IAClB,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAC7C,IAAI,CAAC;YACJ,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,UAAU,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACR,8DAA8D;QAC/D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzB,kBAAkB,GAAG,IAAI,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC;gBACJ,IAAI,WAAW,EAAE,CAAC;oBACjB,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC9B,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,2BAA2B;YAC5B,CAAC;QACF,CAAC,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;YAC/B,KAAK,QAAQ,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC3B,KAAK,QAAQ,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC5B,KAAK,QAAQ,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,eAAe,CAAC;AACxB,CAAC","sourcesContent":["import { createRequire } from \"node:module\";\nimport {\n\tDiagConsoleLogger,\n\tDiagLogLevel,\n\tdiag,\n\ttrace,\n} from \"@opentelemetry/api\";\nimport { getNodeAutoInstrumentations } from \"@opentelemetry/auto-instrumentations-node\";\nimport { resourceFromAttributes } from \"@opentelemetry/resources\";\nimport { NodeSDK } from \"@opentelemetry/sdk-node\";\nimport {\n\tSEMRESATTRS_DEPLOYMENT_ENVIRONMENT,\n\tSEMRESATTRS_SERVICE_NAME,\n\tSEMRESATTRS_SERVICE_VERSION,\n} from \"@opentelemetry/semantic-conventions\";\n\nlet sdkStartPromise: Promise<void> | null = null;\nlet sdkStarted = false;\nlet handlersRegistered = false;\nlet configuredServiceName: string | null = null;\nlet configuredSampler: string | null = null;\nlet sdkInstance: NodeSDK | null = null;\n\nconst packageVersion = (() => {\n\tlet cached: string | null = null;\n\treturn (): string => {\n\t\tif (cached) {\n\t\t\treturn cached;\n\t\t}\n\t\ttry {\n\t\t\tconst packageJson = createRequire(import.meta.url)(\"../package.json\") as {\n\t\t\t\tversion?: string;\n\t\t\t};\n\t\t\tconst version = packageJson.version;\n\t\t\tcached = typeof version === \"string\" ? version : \"unknown\";\n\t\t} catch (error) {\n\t\t\tcached = process.env.MAESTRO_VERSION ?? \"unknown\";\n\t\t}\n\t\treturn cached;\n\t};\n})();\n\nexport const isOpenTelemetryEnabled = (): boolean => {\n\tif (process.env.MAESTRO_OTEL === \"0\") {\n\t\treturn false;\n\t}\n\n\tif (process.env.MAESTRO_OTEL === \"1\") {\n\t\treturn true;\n\t}\n\n\tconst hasOtlpEndpoint = Boolean(process.env.OTEL_EXPORTER_OTLP_ENDPOINT);\n\tconst traceExporter = process.env.OTEL_TRACES_EXPORTER;\n\tconst metricsExporter = process.env.OTEL_METRICS_EXPORTER;\n\tconst logsExporter = process.env.OTEL_LOGS_EXPORTER;\n\tconst hasExplicitExporter =\n\t\t(traceExporter && traceExporter !== \"none\") ||\n\t\t(metricsExporter && metricsExporter !== \"none\") ||\n\t\t(logsExporter && logsExporter !== \"none\");\n\n\treturn hasOtlpEndpoint || Boolean(hasExplicitExporter);\n};\n\nexport const getTelemetryTracer = () => trace.getTracer(\"composer\");\n\nexport interface OpenTelemetryStatus {\n\tenabled: boolean;\n\treason: string;\n\tserviceName: string;\n\tsdkStarted: boolean;\n\totlpEndpoint?: string;\n\ttracesExporter?: string;\n\tmetricsExporter?: string;\n\tlogsExporter?: string;\n\tautoInstrumentation: boolean;\n\tsampler?: string;\n}\n\nexport function getOpenTelemetryStatus(): OpenTelemetryStatus {\n\tconst enabled = isOpenTelemetryEnabled();\n\tconst otlpEndpoint = process.env.OTEL_EXPORTER_OTLP_ENDPOINT;\n\tconst tracesExporter =\n\t\tprocess.env.OTEL_TRACES_EXPORTER || (otlpEndpoint ? \"otlp\" : \"default\");\n\tconst metricsExporter =\n\t\tprocess.env.OTEL_METRICS_EXPORTER || (otlpEndpoint ? \"otlp\" : \"default\");\n\tconst logsExporter =\n\t\tprocess.env.OTEL_LOGS_EXPORTER || (otlpEndpoint ? \"otlp\" : \"default\");\n\tconst sampler =\n\t\tconfiguredSampler ||\n\t\tprocess.env.OTEL_TRACES_SAMPLER ||\n\t\tprocess.env.MAESTRO_OTEL_SAMPLER ||\n\t\t\"parentbased_traceidratio\";\n\n\tconst reason = enabled\n\t\t? process.env.MAESTRO_OTEL === \"1\"\n\t\t\t? \"MAESTRO_OTEL=1\"\n\t\t\t: \"OTEL exporter detected\"\n\t\t: process.env.MAESTRO_OTEL === \"0\"\n\t\t\t? \"MAESTRO_OTEL=0\"\n\t\t\t: \"no OTEL exporter configured\";\n\n\treturn {\n\t\tenabled,\n\t\treason,\n\t\tserviceName:\n\t\t\tconfiguredServiceName ||\n\t\t\tprocess.env.MAESTRO_OTEL_SERVICE_NAME ||\n\t\t\t\"composer\",\n\t\tsdkStarted,\n\t\totlpEndpoint,\n\t\ttracesExporter,\n\t\tmetricsExporter,\n\t\tlogsExporter,\n\t\tautoInstrumentation: enabled,\n\t\tsampler,\n\t};\n}\n\nexport async function initOpenTelemetry(\n\tserviceName = \"composer\",\n): Promise<void> {\n\tif (sdkStartPromise) {\n\t\treturn sdkStartPromise;\n\t}\n\tif (!isOpenTelemetryEnabled()) {\n\t\tsdkStartPromise = Promise.resolve();\n\t\treturn sdkStartPromise;\n\t}\n\n\tdiag.setLogger(new DiagConsoleLogger(), DiagLogLevel.ERROR);\n\n\tconst resolvedServiceName =\n\t\tprocess.env.MAESTRO_OTEL_SERVICE_NAME || serviceName;\n\tconfiguredServiceName = resolvedServiceName;\n\n\tif (process.env.MAESTRO_OTEL_SAMPLER && !process.env.OTEL_TRACES_SAMPLER) {\n\t\tprocess.env.OTEL_TRACES_SAMPLER = process.env.MAESTRO_OTEL_SAMPLER;\n\t\tconfiguredSampler = process.env.MAESTRO_OTEL_SAMPLER;\n\t} else if (process.env.OTEL_TRACES_SAMPLER) {\n\t\tconfiguredSampler = process.env.OTEL_TRACES_SAMPLER;\n\t}\n\tconst resource = resourceFromAttributes({\n\t\t[SEMRESATTRS_SERVICE_NAME]: resolvedServiceName,\n\t\t[SEMRESATTRS_SERVICE_VERSION]: packageVersion(),\n\t\t[SEMRESATTRS_DEPLOYMENT_ENVIRONMENT]: process.env.NODE_ENV ?? \"development\",\n\t});\n\n\tconst sdk = new NodeSDK({\n\t\tresource,\n\t\tinstrumentations: [getNodeAutoInstrumentations()],\n\t});\n\tsdkInstance = sdk;\n\tsdkStartPromise = Promise.resolve().then(() => {\n\t\ttry {\n\t\t\tsdk.start();\n\t\t\tsdkStarted = true;\n\t\t} catch {\n\t\t\t// If OTEL boot fails, continue without blocking CLI/Web usage\n\t\t}\n\t});\n\n\tif (!handlersRegistered) {\n\t\thandlersRegistered = true;\n\t\tconst shutdown = async () => {\n\t\t\ttry {\n\t\t\t\tif (sdkInstance) {\n\t\t\t\t\tawait sdkInstance.shutdown();\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// Ignore shutdown failures\n\t\t\t}\n\t\t};\n\n\t\tprocess.once(\"beforeExit\", () => {\n\t\t\tvoid shutdown();\n\t\t});\n\t\tprocess.once(\"SIGINT\", () => {\n\t\t\tvoid shutdown();\n\t\t});\n\t\tprocess.once(\"SIGTERM\", () => {\n\t\t\tvoid shutdown();\n\t\t});\n\t}\n\n\treturn sdkStartPromise;\n}\n"]}