@nordbyte/nordrelay 0.2.1

package/dist/access-control.js

@@ -0,0 +1,146 @@
+const ALL_PERMISSIONS = [
+    "inspect",
+    "sessions",
+    "prompt",
+    "files",
+    "settings",
+    "auth",
+    "admin",
+];
+const COMMAND_PERMISSIONS = new Map([
+    ["start", "inspect"],
+    ["help", "inspect"],
+    ["status", "inspect"],
+    ["health", "inspect"],
+    ["version", "inspect"],
+    ["diagnostics", "admin"],
+    ["tasks", "inspect"],
+    ["progress", "inspect"],
+    ["activity", "inspect"],
+    ["mirror", "settings"],
+    ["notify", "settings"],
+    ["workspaces", "sessions"],
+    ["voice", "inspect"],
+    ["agent", "settings"],
+    ["session", "sessions"],
+    ["sessions", "sessions"],
+    ["switch", "sessions"],
+    ["pinned", "sessions"],
+    ["pin", "sessions"],
+    ["unpin", "sessions"],
+    ["attach", "sessions"],
+    ["handback", "sessions"],
+    ["new", "sessions"],
+    ["sync", "sessions"],
+    ["queue", "inspect"],
+    ["cancel", "prompt"],
+    ["clearqueue", "prompt"],
+    ["retry", "prompt"],
+    ["abort", "prompt"],
+    ["stop", "prompt"],
+    ["artifacts", "files"],
+    ["launch", "settings"],
+    ["launch_profiles", "settings"],
+    ["launch-profiles", "settings"],
+    ["fast", "settings"],
+    ["model", "settings"],
+    ["reasoning", "settings"],
+    ["effort", "settings"],
+    ["auth", "inspect"],
+    ["login", "auth"],
+    ["logout", "auth"],
+    ["logs", "admin"],
+    ["restart", "admin"],
+    ["update", "admin"],
+]);
+export function createDefaultRolePolicies() {
+    return {
+        admin: new Set(ALL_PERMISSIONS),
+        operator: new Set(["inspect", "sessions", "prompt", "files", "settings", "auth"]),
+        readonly: new Set(["inspect", "sessions"]),
+    };
+}
+export function parseRolePoliciesJson(raw) {
+    const policies = createDefaultRolePolicies();
+    if (!raw) {
+        return policies;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new Error(`Invalid TELEGRAM_ROLE_POLICIES_JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error("TELEGRAM_ROLE_POLICIES_JSON must be an object keyed by role");
+    }
+    for (const [role, rawPermissions] of Object.entries(parsed)) {
+        if (!isTelegramRole(role)) {
+            throw new Error(`Invalid TELEGRAM_ROLE_POLICIES_JSON role: ${role}`);
+        }
+        policies[role] = parsePermissionList(rawPermissions, role);
+    }
+    if (!policies.admin.has("admin")) {
+        policies.admin.add("admin");
+    }
+    return policies;
+}
+export function hasTelegramPermission(policies, role, permission) {
+    return policies[role].has(permission) || policies[role].has("admin");
+}
+export function permissionForCommand(command) {
+    if (!command) {
+        return "inspect";
+    }
+    return COMMAND_PERMISSIONS.get(command.toLowerCase()) ?? "inspect";
+}
+export function permissionForCallbackData(callbackData) {
+    if (!callbackData) {
+        return "inspect";
+    }
+    if (callbackData === "noop_page") {
+        return "inspect";
+    }
+    if (/^(sess_|ws_)/.test(callbackData)) {
+        return "sessions";
+    }
+    if (/^(launch_|launchconfirm_|model_|effort_|agent_)/.test(callbackData)) {
+        return "settings";
+    }
+    if (callbackData.startsWith("approval_") || callbackData.startsWith("codex_abort:") || callbackData.startsWith("agent_abort:")) {
+        return "prompt";
+    }
+    if (callbackData.startsWith("queue_")) {
+        return "prompt";
+    }
+    if (callbackData.startsWith("artifact_")) {
+        return "files";
+    }
+    return "inspect";
+}
+export function isTelegramRole(value) {
+    return value === "admin" || value === "operator" || value === "readonly";
+}
+function parsePermissionList(rawPermissions, role) {
+    if (rawPermissions === "*") {
+        return new Set(ALL_PERMISSIONS);
+    }
+    if (!Array.isArray(rawPermissions)) {
+        throw new Error(`TELEGRAM_ROLE_POLICIES_JSON.${role} must be an array or "*"`);
+    }
+    const permissions = new Set();
+    for (const rawPermission of rawPermissions) {
+        if (rawPermission === "*") {
+            return new Set(ALL_PERMISSIONS);
+        }
+        if (typeof rawPermission !== "string" || !isTelegramPermission(rawPermission)) {
+            throw new Error(`Invalid TELEGRAM_ROLE_POLICIES_JSON permission for ${role}: ${String(rawPermission)}`);
+        }
+        permissions.add(rawPermission);
+    }
+    return permissions;
+}
+function isTelegramPermission(value) {
+    return ALL_PERMISSIONS.includes(value);
+}

package/dist/agent-factory.js

@@ -0,0 +1,22 @@
+import { CodexSessionService } from "./codex-session.js";
+import { PiSessionService } from "./pi-session.js";
+export async function createAgentSessionService(config, agentId, options) {
+    if (agentId === "pi") {
+        if (config.piEnabled !== true) {
+            throw new Error("Pi support is disabled. Set NORDRELAY_PI_ENABLED=true.");
+        }
+        return PiSessionService.create(config, options);
+    }
+    if (config.codexEnabled === false) {
+        throw new Error("Codex support is disabled. Set NORDRELAY_CODEX_ENABLED=true.");
+    }
+    return CodexSessionService.create(config, options);
+}
+export function enabledAgents(config) {
+    const agents = [];
+    if (config.codexEnabled !== false)
+        agents.push("codex");
+    if (config.piEnabled)
+        agents.push("pi");
+    return agents;
+}

package/dist/agent.js

@@ -0,0 +1,57 @@
+export const AGENT_IDS = ["codex", "pi"];
+export const CODEX_REASONING_EFFORTS = [
+    "minimal",
+    "low",
+    "medium",
+    "high",
+    "xhigh",
+];
+export const PI_THINKING_LEVELS = [
+    "off",
+    "minimal",
+    "low",
+    "medium",
+    "high",
+    "xhigh",
+];
+export const CODEX_AGENT_CAPABILITIES = {
+    launchProfiles: true,
+    fastMode: true,
+    externalActivity: true,
+    cliMirror: true,
+    activityLog: true,
+    auth: true,
+    login: true,
+    logout: true,
+    usageLimits: true,
+    workspaces: true,
+    attachments: true,
+    modelSelection: true,
+    reasoningSelection: true,
+    handback: true,
+};
+export const PI_AGENT_CAPABILITIES = {
+    launchProfiles: false,
+    fastMode: false,
+    externalActivity: false,
+    cliMirror: false,
+    activityLog: false,
+    auth: false,
+    login: false,
+    logout: false,
+    usageLimits: false,
+    workspaces: true,
+    attachments: true,
+    modelSelection: true,
+    reasoningSelection: true,
+    handback: true,
+};
+export function isAgentId(value) {
+    return value === "codex" || value === "pi";
+}
+export function agentLabel(agentId) {
+    return agentId === "pi" ? "Pi" : "Codex";
+}
+export function agentReasoningLabel(agentId) {
+    return agentId === "pi" ? "Thinking" : "Reasoning";
+}