@omniaseo/cli 0.1.2 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -5,7 +5,7 @@ Node 24 CLI for initializing a non-secret Omnia Connect workspace and connecting
|
|
|
5
5
|
With Node 24 and Codex CLI installed, run the ready-to-use connection command from the Omniaseo Connect page. It downloads this CLI automatically, prints the authorization link for your usual browser and checks a workspace read; no manual OAuth settings are required. The command pins the release, for example:
|
|
6
6
|
|
|
7
7
|
```bash
|
|
8
|
-
npx --yes @omniaseo/cli@0.1.
|
|
8
|
+
npx --yes @omniaseo/cli@0.1.3 connect codex --url https://connect.example.com/mcp --resource https://connect.example.com
|
|
9
9
|
```
|
|
10
10
|
|
|
11
11
|
Use the command supplied by your workspace so its server addresses are correct. Already-open Codex applications must restart after setup to load the connection settings.
|
|
@@ -46,4 +46,4 @@ Selected areas are intersected with actual plan entitlements and effective conse
|
|
|
46
46
|
|
|
47
47
|
Linux native CLI and native app-server reconnect were exercised with Codex 0.160.1 in an isolated HTTPS/PKCE fixture. Windows/macOS service adapters are implemented but require platform runtime acceptance before claiming equivalent proof. The legacy staging profile with a shared predefined synthetic client deliberately rejects receiver registration: use a dedicated synthetic acceptance profile with unique clients and exact-identity seeded fixture connections. Never attach multiple host keys to that shared client.
|
|
48
48
|
|
|
49
|
-
Release distribution: publish the reviewed exact 0.1.
|
|
49
|
+
Release distribution: publish the reviewed exact 0.1.3 archive under npm `next` before staging so the pinned version resolves. Promote npm `latest` only after production acceptance; package publication and product deployment each require their own readback.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"callback-receiver.d.ts","sourceRoot":"","sources":["../../src/auth/callback-receiver.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AACnI,KAAK,QAAQ,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;
|
|
1
|
+
{"version":3,"file":"callback-receiver.d.ts","sourceRoot":"","sources":["../../src/auth/callback-receiver.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AACnI,KAAK,QAAQ,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAWxF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,SAAa,GAAG,MAAM,CAuBpG;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBlG"}
|
|
@@ -3,13 +3,29 @@
|
|
|
3
3
|
import { readFile } from 'node:fs/promises';
|
|
4
4
|
import { createDecipheriv, privateDecrypt } from 'node:crypto';
|
|
5
5
|
import { pathToFileURL } from 'node:url';
|
|
6
|
+
function envelopeBytes(value, maximumBytes, exactBytes = maximumBytes) {
|
|
7
|
+
if (typeof value !== 'string' || value.length > Math.ceil(maximumBytes * 4 / 3)
|
|
8
|
+
|| !/^[A-Za-z0-9_-]+$/u.test(value))
|
|
9
|
+
throw new Error('Invalid callback envelope');
|
|
10
|
+
const bytes = Buffer.from(value, 'base64url');
|
|
11
|
+
if (bytes.toString('base64url') !== value || bytes.length > maximumBytes
|
|
12
|
+
|| (exactBytes > 0 && bytes.length !== exactBytes))
|
|
13
|
+
throw new Error('Invalid callback envelope');
|
|
14
|
+
return bytes;
|
|
15
|
+
}
|
|
6
16
|
export function decryptCallback(envelope, config, now = Date.now()) {
|
|
7
|
-
if (envelope
|
|
17
|
+
if (envelope?.version !== 1)
|
|
8
18
|
throw new Error('Unsupported callback envelope');
|
|
9
|
-
const
|
|
10
|
-
const
|
|
11
|
-
|
|
12
|
-
const
|
|
19
|
+
const wrappedKey = envelopeBytes(envelope.key, 256);
|
|
20
|
+
const iv = envelopeBytes(envelope.iv, 12);
|
|
21
|
+
const tag = envelopeBytes(envelope.tag, 16);
|
|
22
|
+
const encrypted = envelopeBytes(envelope.data, 65536, 0);
|
|
23
|
+
const key = privateDecrypt({ key: config.privateKey, oaepHash: 'sha256' }, wrappedKey);
|
|
24
|
+
if (key.length !== 32)
|
|
25
|
+
throw new Error('Invalid callback envelope');
|
|
26
|
+
const cipher = createDecipheriv('aes-256-gcm', key, iv, { authTagLength: 16 });
|
|
27
|
+
cipher.setAuthTag(tag);
|
|
28
|
+
const data = JSON.parse(Buffer.concat([cipher.update(encrypted), cipher.final()]).toString('utf8'));
|
|
13
29
|
const url = new URL(data.redirect);
|
|
14
30
|
const target = new URL(config.redirectUri);
|
|
15
31
|
if (data.clientId !== config.clientId || !Number.isFinite(Date.parse(data.expiresAt)) || Date.parse(data.expiresAt) <= now
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"callback-receiver.js","sourceRoot":"","sources":["../../src/auth/callback-receiver.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAKzC,MAAM,UAAU,eAAe,CAAC,QAAkB,EAAE,MAAsB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1F,IAAI,QAAQ,
|
|
1
|
+
{"version":3,"file":"callback-receiver.js","sourceRoot":"","sources":["../../src/auth/callback-receiver.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAKzC,SAAS,aAAa,CAAC,KAAa,EAAE,YAAoB,EAAE,UAAU,GAAG,YAAY;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,CAAC;WAC1E,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;WACnE,CAAC,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACnG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAkB,EAAE,MAAsB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1F,IAAI,QAAQ,EAAE,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,UAAU,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAEjG,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG;WACrH,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;WACpD,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW;WACjG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;WAC5G,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;WAC/E,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;WACxF,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC3I,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAsB,EAAE,MAAoB;IACjF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACnJ,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,UAAU,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACrG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,cAAc,EAAE,EAAE;gBAC7E,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACvD,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;gBAC3G,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAc,EAAE,MAAM,CAAC,CAAC;gBAC5E,mEAAmE;gBACnE,2EAA2E;gBAC3E,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjF,SAAS,GAAG,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,2EAA2E;QAC7E,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAmB,CAAC;IAC3F,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC"}
|
package/dist/commands/doctor.js
CHANGED
|
@@ -5,7 +5,7 @@ export async function doctor(options) {
|
|
|
5
5
|
const checks = [];
|
|
6
6
|
const workspace = resolve(options.workspace);
|
|
7
7
|
const version = options.nodeVersion ?? process.version;
|
|
8
|
-
checks.push({ name: 'cli_version', status: 'pass', detail: '@omniaseo/cli 0.1.
|
|
8
|
+
checks.push({ name: 'cli_version', status: 'pass', detail: '@omniaseo/cli 0.1.3' });
|
|
9
9
|
checks.push({
|
|
10
10
|
name: 'node',
|
|
11
11
|
status: version.replace(/^v/u, '').startsWith('24.') ? 'pass' : 'fail',
|
package/dist/index.js
CHANGED
|
@@ -75,7 +75,7 @@ export async function main(argv = process.argv) {
|
|
|
75
75
|
program
|
|
76
76
|
.name('omnia')
|
|
77
77
|
.description('Omnia Connect workspace and MCP host setup')
|
|
78
|
-
.version('0.1.
|
|
78
|
+
.version('0.1.3')
|
|
79
79
|
.option('--json', 'emit machine-readable JSON')
|
|
80
80
|
.option('--profile <profile>', 'OS-keychain credential profile', 'default')
|
|
81
81
|
.showHelpAfterError()
|