@jeffusion/bungee 5.11.0 → 5.12.0

package/dist/index.js

@@ -3397,7 +3397,7 @@ import { createInterface } from "node:readline";
 // package.json
 var package_default = {
   name: "@jeffusion/bungee",
-  version: "5.11.0",
+  version: "5.12.0",
   description: "High-performance reverse proxy server CLI",
   type: "module",
   bin: {
@@ -6049,9 +6049,107 @@ async function importCommand(options) {
   }
 }
 
+// ../core/src/oauth-callback.ts
+import { createServer } from "node:http";
+var CALLBACK_PATH = "/auth/callback";
+async function captureOAuthCallback(options = {}) {
+  const port = options.port ?? 1455;
+  const timeoutMs = options.timeoutMs ?? 5 * 60000;
+  if (!Number.isInteger(port) || port < 0 || port > 65535 || !Number.isFinite(timeoutMs) || timeoutMs <= 0)
+    throw new Error("Invalid callback listener options");
+  let settle;
+  let fail;
+  let completed = false;
+  const result = new Promise((resolve, reject) => {
+    settle = resolve;
+    fail = reject;
+  });
+  const reject = (message) => {
+    if (completed)
+      return;
+    completed = true;
+    fail(new Error(message));
+  };
+  const server = createServer({ maxHeaderSize: 8192 }, (request, response) => {
+    response.setHeader("Content-Type", "text/plain; charset=utf-8");
+    response.setHeader("Cache-Control", "no-store");
+    response.setHeader("Referrer-Policy", "no-referrer");
+    const address = server.address();
+    const actualPort = address && typeof address === "object" ? address.port : port;
+    const raw = request.url ?? "";
+    let url;
+    try {
+      url = new URL(raw, `http://127.0.0.1:${actualPort}`);
+    } catch {
+      response.writeHead(400).end("Invalid callback.");
+      return;
+    }
+    const code = url.searchParams.get("code");
+    const state = url.searchParams.get("state");
+    const clientId = url.searchParams.get("client_id");
+    const valid = request.method === "GET" && raw.split("?")[0] === CALLBACK_PATH && raw.length <= 4096 && !url.hash && !url.searchParams.has("error") && !url.searchParams.has("error_description") && [...url.searchParams.keys()].every((key) => url.searchParams.getAll(key).length === 1) && [code, state].every((value) => typeof value === "string" && value.length > 0 && value.trim() === value && !/[\u0000-\u001f\u007f]/.test(value)) && typeof clientId === "string" && /^oaiapp_[A-Za-z0-9_-]{1,200}$/.test(clientId);
+    if (!valid) {
+      response.writeHead(400).end("Invalid callback. Continue with the Bungee authorization page.");
+      return;
+    }
+    if (completed) {
+      response.writeHead(409).end("Callback already captured.");
+      return;
+    }
+    completed = true;
+    response.writeHead(200).end("Callback captured. Paste the complete URL shown in your terminal into Bungee to finish signing in.");
+    settle(url.toString());
+  });
+  server.on("error", () => reject("Cannot listen on 127.0.0.1. Check whether the callback port is occupied."));
+  const abort = () => reject("Callback capture cancelled.");
+  const timer = setTimeout(() => reject("Callback capture timed out. Start a new Bungee login."), timeoutMs);
+  options.signal?.addEventListener("abort", abort, { once: true });
+  try {
+    if (options.signal?.aborted)
+      abort();
+    else
+      server.listen(port, "127.0.0.1", () => {
+        const address = server.address();
+        if (address && typeof address === "object")
+          options.onListening?.(address.port);
+      });
+    return await result;
+  } finally {
+    clearTimeout(timer);
+    options.signal?.removeEventListener("abort", abort);
+    server.closeIdleConnections();
+    server.close();
+    server.closeAllConnections();
+  }
+}
+async function oauthCallbackCommand() {
+  const controller = new AbortController;
+  const cancel = () => controller.abort();
+  process.once("SIGINT", cancel);
+  process.once("SIGTERM", cancel);
+  try {
+    const url = await captureOAuthCallback({ signal: controller.signal, onListening: () => {
+      console.error("Listening on 127.0.0.1:1455. Open the SIWC authorization URL from Bungee.");
+      console.error("The printed callback contains a one-time login code. Paste it only into your Bungee login window.");
+    } });
+    console.log(url);
+  } finally {
+    process.removeListener("SIGINT", cancel);
+    process.removeListener("SIGTERM", cancel);
+  }
+}
+
 // src/index.ts
 function createProgram() {
   const program = new Command2().name("bungee").description("High-performance reverse proxy server built with Bun and TypeScript").version(package_default.version);
+  program.command("oauth-callback").description("Capture one SIWC browser callback on 127.0.0.1:1455 for manual submission to Bungee").action(async () => {
+    try {
+      await oauthCallbackCommand();
+    } catch {
+      console.error("OAuth callback capture failed or was cancelled. Check the local port and restart the login.");
+      process.exitCode = 1;
+    }
+  });
   program.command("init").description("Initialize the Bungee SQLite data directory").action(initCommand);
   program.command("recover").description("Recover a stopped instance using bounded JSON from stdin or a 0600 file").option("--file <path>", "Owner-only 0600 recovery JSON input file").addHelpText("after", `
 Stop the instance first. Supply one JSON object via stdin or bungee recover --file recovery.json (chmod 600).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jeffusion/bungee",
-  "version": "5.11.0",
+  "version": "5.12.0",
   "description": "High-performance reverse proxy server CLI",
   "type": "module",
   "bin": {
@@ -13,8 +13,8 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@jeffusion/bungee-core": "^5.11.0",
-    "@jeffusion/bungee-types": "^5.11.0",
+    "@jeffusion/bungee-core": "^5.12.0",
+    "@jeffusion/bungee-types": "^5.12.0",
     "cli-progress": "^3.12.0",
     "commander": "^14.0.1"
   },