@gajae-code/ai 0.18.11 → 0.19.0

package/src/utils/oauth/types.d.ts

@@ -7,6 +7,15 @@ export type OAuthCredentials = {
     email?: string;
     accountId?: string;
     profileArn?: string;
+    /**
+     * Organization the token is scoped to. One Anthropic account can belong to
+     * several organizations (e.g. a Team workspace and a personal Max plan); each
+     * login is bound to exactly one of them, so the organization is part of the
+     * credential's identity.
+     */
+    organizationId?: string;
+    /** Display name of {@link organizationId}. */
+    organizationName?: string;
 };
 export type OAuthProvider = "kiro" | "alibaba-token-plan" | "anthropic" | "bizrouter" | "mara" | "cerebras" | "cloudflare-ai-gateway" | "cursor" | "deepseek" | "deepinfra" | "fireworks" | "firepass" | "fugu" | "github-copilot" | "google-gemini-cli" | "google-antigravity" | "gitlab-duo" | "huggingface" | "kimi-code" | "kilo" | "kagi" | "litellm" | "lm-studio" | "minimax-code" | "minimax-code-cn" | "moonshot" | "nvidia" | "nanogpt" | "ollama" | "ollama-cloud" | "openai-codex" | "openai-codex-device" | "opencode-go" | "opencode-zen" | "commandcode-goat" | "opengateway" | "openrouter" | "parallel" | "perplexity" | "qianfan" | "qwen-portal" | "sglang" | "synthetic" | "tavily" | "together" | "venice" | "vercel-ai-gateway" | "vllm" | "xai" | "glm-zcode" | "xiaomi" | "xiaomi-token-plan-sgp" | "xiaomi-token-plan-ams" | "xiaomi-token-plan-cn" | "zenmux" | "opencodex" | "zai";
 export type OAuthProviderId = OAuthProvider | (string & {});

package/src/utils/oauth/types.ts

@@ -7,6 +7,15 @@ export type OAuthCredentials = {
 	email?: string;
 	accountId?: string;
 	profileArn?: string;
+	/**
+	 * Organization the token is scoped to. One Anthropic account can belong to
+	 * several organizations (e.g. a Team workspace and a personal Max plan); each
+	 * login is bound to exactly one of them, so the organization is part of the
+	 * credential's identity.
+	 */
+	organizationId?: string;
+	/** Display name of {@link organizationId}. */
+	organizationName?: string;
 };
 
 export type OAuthProvider =

package/src/utils/parse-bind.d.ts

@@ -0,0 +1,35 @@
+export interface ParsedBind {
+    hostname: string;
+    port: number;
+}
+/**
+ * Parse a `host:port` (or bare `port`, which assumes loopback) string.
+ *
+ * Accepts:
+ *   - `"4000"`            → `127.0.0.1:4000`
+ *   - `"0.0.0.0:4000"`    → as written
+ *   - `"[::1]:4000"`      → as written (brackets retained, Bun handles them)
+ *
+ * Rejects:
+ *   - empty input
+ *   - empty hostname (`":4000"`)
+ *   - non-integer / out-of-range port
+ */
+export declare function parseBind(raw: string): ParsedBind;
+/** True for loopback-only hostnames the auth servers may bind without credentials. */
+export declare function isLoopbackHostname(hostname: string): boolean;
+/**
+ * Fail closed when an unauthenticated auth server (empty bearer token set)
+ * would bind a non-loopback address: that exposes credential operations to the
+ * network with no proof of possession.
+ */
+export declare function assertAuthenticatedOrLoopback(bind: ParsedBind, bearerTokenCount: number, serverName: string): void;
+/**
+ * Tokenless loopback servers accept a request only when its Host header is the
+ * bound hostname and effective port. Default-port forms that stay allowed:
+ * a Host with no port, or an explicit :80, on an HTTP listener on port 80;
+ * an explicit :443 on a listener on port 443. Any other omitted port is
+ * rejected. A DNS-rebound same-origin GET sends the attacker's name and no
+ * Origin header.
+ */
+export declare function hostHeaderMatchesBind(hostHeader: string | null, bind: ParsedBind): boolean;

package/src/utils/proxy.ts

@@ -1,5 +1,7 @@
 import * as net from "node:net";
 import * as tls from "node:tls";
+import { loadedProjectEnvSnapshot } from "@gajae-code/utils";
+import { canonicalEnvKey } from "@gajae-code/utils/env-file";
 
 export interface ProxyConnectOptions {
 	signal?: AbortSignal;
@@ -48,6 +50,33 @@ function firstEnvValue(...names: string[]): string | undefined {
 	return undefined;
 }
 
+// This module may load lazily after --worktree changes cwd. Use the shared
+// process-startup snapshot captured by @gajae-code/utils before that transition.
+// A dynamic declaration is refused, and a runtime value equal to the declared
+// text is ambiguous. A distinct shell value remains a selector.
+const projectProxyEnv = loadedProjectEnvSnapshot();
+
+function projectSuppliedProxy(name: string, runtime: string): boolean {
+	const key = canonicalEnvKey(name);
+	const declared = projectProxyEnv.values[key];
+	if (declared === undefined && !projectProxyEnv.dynamic.has(key)) return false;
+	return projectProxyEnv.dynamic.has(key) || declared === runtime || declared === runtime.trim();
+}
+
+function trustedProxyEnvValue(name: string): string | undefined {
+	const runtime = process.env[name];
+	if (!runtime?.trim() || projectSuppliedProxy(name, runtime)) return undefined;
+	return runtime.trim();
+}
+
+function firstTrustedProxyEnv(...names: string[]): string | undefined {
+	for (const name of names) {
+		const value = trustedProxyEnvValue(name);
+		if (value) return value;
+	}
+	return undefined;
+}
+
 function normalizeHost(hostname: string): string {
 	return hostname
 		.trim()
@@ -254,18 +283,18 @@ export function getProxyForUrl(provider: string, url: URL): string | undefined {
 	const normalizedProvider = normalizeProvider(provider);
 	const protocolProxy =
 		url.protocol === "https:"
-			? firstEnvValue("HTTPS_PROXY", "https_proxy")
+			? firstTrustedProxyEnv("HTTPS_PROXY", "https_proxy")
 			: url.protocol === "http:"
-				? firstEnvValue("HTTP_PROXY", "http_proxy")
+				? firstTrustedProxyEnv("HTTP_PROXY", "http_proxy")
 				: undefined;
 	const candidates = [
-		normalizedProvider ? process.env[`PI_PROXY_${normalizedProvider}`] : undefined,
-		process.env.PI_PROXY,
+		normalizedProvider ? trustedProxyEnvValue(`PI_PROXY_${normalizedProvider}`) : undefined,
+		trustedProxyEnvValue("PI_PROXY"),
 		protocolProxy,
-		firstEnvValue("ALL_PROXY", "all_proxy"),
+		firstTrustedProxyEnv("ALL_PROXY", "all_proxy"),
 	];
 	for (const candidate of candidates) {
-		if (candidate?.trim()) return candidate.trim();
+		if (candidate) return candidate;
 	}
 	return undefined;
 }