@terminai/core 0.21.0 → 0.25.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/assets/image.png +0 -0
- package/dist/src/audit/redaction.js +24 -0
- package/dist/src/audit/redaction.js.map +1 -1
- package/dist/src/audit/redaction.test.d.ts +7 -0
- package/dist/src/audit/redaction.test.js +45 -0
- package/dist/src/audit/redaction.test.js.map +1 -0
- package/dist/src/auth/geminiAuthStatus.js +1 -1
- package/dist/src/auth/geminiAuthStatus.js.map +1 -1
- package/dist/src/auth/geminiAuthStatus.test.js +1 -1
- package/dist/src/auth/geminiAuthStatus.test.js.map +1 -1
- package/dist/src/auth/providerRegistry.js +20 -0
- package/dist/src/auth/providerRegistry.js.map +1 -1
- package/dist/src/auth/wizardSettings.d.ts +5 -0
- package/dist/src/auth/wizardSettings.js +48 -1
- package/dist/src/auth/wizardSettings.js.map +1 -1
- package/dist/src/auth/wizardSettings.test.js +30 -2
- package/dist/src/auth/wizardSettings.test.js.map +1 -1
- package/dist/src/auth/wizardState.d.ts +1 -1
- package/dist/src/auth/wizardState.js +6 -0
- package/dist/src/auth/wizardState.js.map +1 -1
- package/dist/src/auth/wizardState.test.js +23 -0
- package/dist/src/auth/wizardState.test.js.map +1 -1
- package/dist/src/availability/policyHelpers.test.js +4 -4
- package/dist/src/availability/policyHelpers.test.js.map +1 -1
- package/dist/src/brain/__tests__/environmentDetector.test.js +2 -1
- package/dist/src/brain/__tests__/environmentDetector.test.js.map +1 -1
- package/dist/src/brain/__tests__/orchestratorFlag.test.d.ts +7 -0
- package/dist/src/brain/__tests__/orchestratorFlag.test.js +47 -0
- package/dist/src/brain/__tests__/orchestratorFlag.test.js.map +1 -0
- package/dist/src/brain/__tests__/orchestratorRecovery.test.d.ts +7 -0
- package/dist/src/brain/__tests__/orchestratorRecovery.test.js +85 -0
- package/dist/src/brain/__tests__/orchestratorRecovery.test.js.map +1 -0
- package/dist/src/brain/__tests__/thinkingOrchestrator.test.js +1 -0
- package/dist/src/brain/__tests__/thinkingOrchestrator.test.js.map +1 -1
- package/dist/src/brain/__tests__/toolIntegration.test.d.ts +7 -0
- package/dist/src/brain/__tests__/toolIntegration.test.js +154 -0
- package/dist/src/brain/__tests__/toolIntegration.test.js.map +1 -0
- package/dist/src/brain/advisors/codeGenerator.js +3 -2
- package/dist/src/brain/advisors/codeGenerator.js.map +1 -1
- package/dist/src/brain/advisors/depScanner.js +3 -2
- package/dist/src/brain/advisors/depScanner.js.map +1 -1
- package/dist/src/brain/advisors/enumerator.js +3 -2
- package/dist/src/brain/advisors/enumerator.js.map +1 -1
- package/dist/src/brain/advisors/fallbackChain.js +3 -2
- package/dist/src/brain/advisors/fallbackChain.js.map +1 -1
- package/dist/src/brain/advisors/patternMatcher.js +3 -2
- package/dist/src/brain/advisors/patternMatcher.js.map +1 -1
- package/dist/src/brain/consensus.js +2 -1
- package/dist/src/brain/consensus.js.map +1 -1
- package/dist/src/brain/environmentDetector.d.ts +1 -0
- package/dist/src/brain/environmentDetector.js +35 -20
- package/dist/src/brain/environmentDetector.js.map +1 -1
- package/dist/src/brain/pacLoop.js +2 -1
- package/dist/src/brain/pacLoop.js.map +1 -1
- package/dist/src/brain/riskAssessor.d.ts +6 -2
- package/dist/src/brain/riskAssessor.js +7 -4
- package/dist/src/brain/riskAssessor.js.map +1 -1
- package/dist/src/brain/stepBackEvaluator.js +2 -1
- package/dist/src/brain/stepBackEvaluator.js.map +1 -1
- package/dist/src/brain/thinkingOrchestrator.d.ts +9 -1
- package/dist/src/brain/thinkingOrchestrator.js +47 -1
- package/dist/src/brain/thinkingOrchestrator.js.map +1 -1
- package/dist/src/brain/toolIntegration.d.ts +51 -0
- package/dist/src/brain/toolIntegration.js +202 -0
- package/dist/src/brain/toolIntegration.js.map +1 -0
- package/dist/src/code_assist/oauth2.begin.test.js +4 -1
- package/dist/src/code_assist/oauth2.begin.test.js.map +1 -1
- package/dist/src/code_assist/oauth2.d.ts +1 -1
- package/dist/src/code_assist/oauth2.js +9 -13
- package/dist/src/code_assist/oauth2.js.map +1 -1
- package/dist/src/code_assist/oauth2.test.js +69 -41
- package/dist/src/code_assist/oauth2.test.js.map +1 -1
- package/dist/src/commands/init.js +5 -0
- package/dist/src/commands/init.js.map +1 -1
- package/dist/src/computer/PersistentShell.d.ts +5 -0
- package/dist/src/computer/PersistentShell.js +21 -2
- package/dist/src/computer/PersistentShell.js.map +1 -1
- package/dist/src/computer/PersistentShell.test.js +23 -11
- package/dist/src/computer/PersistentShell.test.js.map +1 -1
- package/dist/src/config/builder.js +78 -5
- package/dist/src/config/builder.js.map +1 -1
- package/dist/src/config/config.d.ts +12 -1
- package/dist/src/config/config.js +64 -0
- package/dist/src/config/config.js.map +1 -1
- package/dist/src/config/config.test.js +39 -0
- package/dist/src/config/config.test.js.map +1 -1
- package/dist/src/config/models.d.ts +2 -2
- package/dist/src/config/models.js +2 -2
- package/dist/src/config/models.js.map +1 -1
- package/dist/src/config/models.test.js +1 -1
- package/dist/src/config/settings/schema.d.ts +78 -4
- package/dist/src/config/settings/schema.js +76 -4
- package/dist/src/config/settings/schema.js.map +1 -1
- package/dist/src/core/chatGptCodexContentGenerator.d.ts +35 -0
- package/dist/src/core/chatGptCodexContentGenerator.js +605 -0
- package/dist/src/core/chatGptCodexContentGenerator.js.map +1 -0
- package/dist/src/core/chatGptCodexContentGenerator.test.d.ts +7 -0
- package/dist/src/core/chatGptCodexContentGenerator.test.js +250 -0
- package/dist/src/core/chatGptCodexContentGenerator.test.js.map +1 -0
- package/dist/src/core/contentGenerator.d.ts +2 -1
- package/dist/src/core/contentGenerator.js +10 -0
- package/dist/src/core/contentGenerator.js.map +1 -1
- package/dist/src/core/contentGenerator.test.js +36 -0
- package/dist/src/core/contentGenerator.test.js.map +1 -1
- package/dist/src/core/loggingContentGenerator.d.ts +1 -0
- package/dist/src/core/loggingContentGenerator.js +30 -0
- package/dist/src/core/loggingContentGenerator.js.map +1 -1
- package/dist/src/core/loggingContentGenerator.test.js +62 -0
- package/dist/src/core/loggingContentGenerator.test.js.map +1 -1
- package/dist/src/core/openaiContentGenerator.d.ts +16 -0
- package/dist/src/core/openaiContentGenerator.js +252 -53
- package/dist/src/core/openaiContentGenerator.js.map +1 -1
- package/dist/src/core/openaiContentGenerator.test.js +176 -7
- package/dist/src/core/openaiContentGenerator.test.js.map +1 -1
- package/dist/src/core/providerTypes.d.ts +17 -1
- package/dist/src/core/providerTypes.js +10 -0
- package/dist/src/core/providerTypes.js.map +1 -1
- package/dist/src/core/providerTypes.test.js +11 -0
- package/dist/src/core/providerTypes.test.js.map +1 -1
- package/dist/src/core/turn.js +1 -1
- package/dist/src/core/turn.js.map +1 -1
- package/dist/src/core/turn.test.js +1 -1
- package/dist/src/core/turn.test.js.map +1 -1
- package/dist/src/fallback/handler.test.js +14 -14
- package/dist/src/fallback/handler.test.js.map +1 -1
- package/dist/src/generated/git-commit.d.ts +2 -2
- package/dist/src/generated/git-commit.js +2 -2
- package/dist/src/generated/git-commit.js.map +1 -1
- package/dist/src/gui/drivers/__tests__/sidecarContract.test.d.ts +2 -2
- package/dist/src/gui/drivers/__tests__/sidecarContract.test.js +3 -4
- package/dist/src/gui/drivers/__tests__/sidecarContract.test.js.map +1 -1
- package/dist/src/gui/drivers/linuxAtspiDriver.js +11 -4
- package/dist/src/gui/drivers/linuxAtspiDriver.js.map +1 -1
- package/dist/src/gui/drivers/windowsUiaDriver.js +2 -2
- package/dist/src/gui/drivers/windowsUiaDriver.js.map +1 -1
- package/dist/src/gui/selectors/__tests__/selectors.test.js +5 -2
- package/dist/src/gui/selectors/__tests__/selectors.test.js.map +1 -1
- package/dist/src/gui/selectors/parser.d.ts +1 -1
- package/dist/src/gui/selectors/parser.js +1 -1
- package/dist/src/gui/selectors/parser.js.map +1 -1
- package/dist/src/gui/service/DesktopAutomationService.d.ts +1 -1
- package/dist/src/gui/service/DesktopAutomationService.js +8 -9
- package/dist/src/gui/service/DesktopAutomationService.js.map +1 -1
- package/dist/src/gui/service/__tests__/capabilities.test.d.ts +6 -0
- package/dist/src/gui/service/__tests__/capabilities.test.js +32 -4
- package/dist/src/gui/service/__tests__/capabilities.test.js.map +1 -1
- package/dist/src/gui/service/__tests__/diagnose.test.d.ts +6 -0
- package/dist/src/gui/service/__tests__/diagnose.test.js +6 -0
- package/dist/src/gui/service/__tests__/diagnose.test.js.map +1 -1
- package/dist/src/gui/service/__tests__/progressive.test.d.ts +6 -0
- package/dist/src/gui/service/__tests__/progressive.test.js +30 -3
- package/dist/src/gui/service/__tests__/progressive.test.js.map +1 -1
- package/dist/src/gui/service/__tests__/redaction.test.d.ts +6 -0
- package/dist/src/gui/service/__tests__/redaction.test.js +27 -1
- package/dist/src/gui/service/__tests__/redaction.test.js.map +1 -1
- package/dist/src/gui/service/__tests__/selectorError.test.d.ts +6 -0
- package/dist/src/gui/service/__tests__/selectorError.test.js +6 -0
- package/dist/src/gui/service/__tests__/selectorError.test.js.map +1 -1
- package/dist/src/gui/service/__tests__/wait.test.d.ts +6 -0
- package/dist/src/gui/service/__tests__/wait.test.js +29 -2
- package/dist/src/gui/service/__tests__/wait.test.js.map +1 -1
- package/dist/src/index.d.ts +6 -0
- package/dist/src/index.js +7 -0
- package/dist/src/index.js.map +1 -1
- package/dist/src/openai_chatgpt/constants.d.ts +23 -0
- package/dist/src/openai_chatgpt/constants.js +35 -0
- package/dist/src/openai_chatgpt/constants.js.map +1 -0
- package/dist/src/openai_chatgpt/credentialStorage.d.ts +18 -0
- package/dist/src/openai_chatgpt/credentialStorage.js +116 -0
- package/dist/src/openai_chatgpt/credentialStorage.js.map +1 -0
- package/dist/src/openai_chatgpt/credentialStorage.test.d.ts +7 -0
- package/dist/src/openai_chatgpt/credentialStorage.test.js +73 -0
- package/dist/src/openai_chatgpt/credentialStorage.test.js.map +1 -0
- package/dist/src/openai_chatgpt/imports.d.ts +10 -0
- package/dist/src/openai_chatgpt/imports.js +164 -0
- package/dist/src/openai_chatgpt/imports.js.map +1 -0
- package/dist/src/openai_chatgpt/imports.test.d.ts +7 -0
- package/dist/src/openai_chatgpt/imports.test.js +82 -0
- package/dist/src/openai_chatgpt/imports.test.js.map +1 -0
- package/dist/src/openai_chatgpt/jwt.d.ts +7 -0
- package/dist/src/openai_chatgpt/jwt.js +31 -0
- package/dist/src/openai_chatgpt/jwt.js.map +1 -0
- package/dist/src/openai_chatgpt/jwt.test.d.ts +7 -0
- package/dist/src/openai_chatgpt/jwt.test.js +23 -0
- package/dist/src/openai_chatgpt/jwt.test.js.map +1 -0
- package/dist/src/openai_chatgpt/oauthClient.d.ts +52 -0
- package/dist/src/openai_chatgpt/oauthClient.js +196 -0
- package/dist/src/openai_chatgpt/oauthClient.js.map +1 -0
- package/dist/src/openai_chatgpt/oauthClient.test.d.ts +7 -0
- package/dist/src/openai_chatgpt/oauthClient.test.js +138 -0
- package/dist/src/openai_chatgpt/oauthClient.test.js.map +1 -0
- package/dist/src/openai_chatgpt/types.d.ts +34 -0
- package/dist/src/openai_chatgpt/types.js +8 -0
- package/dist/src/openai_chatgpt/types.js.map +1 -0
- package/dist/src/policy/shell-safety.test.js +2 -1
- package/dist/src/policy/shell-safety.test.js.map +1 -1
- package/dist/src/safety/approval-ladder/__tests__/buildShellActionProfile.test.js +2 -1
- package/dist/src/safety/approval-ladder/__tests__/buildShellActionProfile.test.js.map +1 -1
- package/dist/src/safety/built-in.test.js +4 -2
- package/dist/src/safety/built-in.test.js.map +1 -1
- package/dist/src/telemetry/metrics.test.js +95 -75
- package/dist/src/telemetry/metrics.test.js.map +1 -1
- package/dist/src/tools/__tests__/edit.risk.test.d.ts +7 -0
- package/dist/src/tools/__tests__/edit.risk.test.js +138 -0
- package/dist/src/tools/__tests__/edit.risk.test.js.map +1 -0
- package/dist/src/tools/__tests__/memoryToolDedupe.test.d.ts +7 -0
- package/dist/src/tools/__tests__/memoryToolDedupe.test.js +53 -0
- package/dist/src/tools/__tests__/memoryToolDedupe.test.js.map +1 -0
- package/dist/src/tools/__tests__/shell.pin.test.js +2 -1
- package/dist/src/tools/__tests__/shell.pin.test.js.map +1 -1
- package/dist/src/tools/__tests__/shell.provenance.test.js +14 -4
- package/dist/src/tools/__tests__/shell.provenance.test.js.map +1 -1
- package/dist/src/tools/__tests__/ui-diagnose.test.d.ts +6 -0
- package/dist/src/tools/__tests__/ui-diagnose.test.js +11 -8
- package/dist/src/tools/__tests__/ui-diagnose.test.js.map +1 -1
- package/dist/src/tools/__tests__/ui-health.test.d.ts +6 -0
- package/dist/src/tools/__tests__/ui-health.test.js +37 -37
- package/dist/src/tools/__tests__/ui-health.test.js.map +1 -1
- package/dist/src/tools/agent-control.js +6 -18
- package/dist/src/tools/agent-control.js.map +1 -1
- package/dist/src/tools/agent-control.test.js +2 -28
- package/dist/src/tools/agent-control.test.js.map +1 -1
- package/dist/src/tools/edit.js +49 -9
- package/dist/src/tools/edit.js.map +1 -1
- package/dist/src/tools/edit.test.js +1 -19
- package/dist/src/tools/edit.test.js.map +1 -1
- package/dist/src/tools/file-ops.js +9 -10
- package/dist/src/tools/file-ops.js.map +1 -1
- package/dist/src/tools/file-ops.test.js +0 -7
- package/dist/src/tools/file-ops.test.js.map +1 -1
- package/dist/src/tools/glob.js +4 -16
- package/dist/src/tools/glob.js.map +1 -1
- package/dist/src/tools/glob.test.js +0 -29
- package/dist/src/tools/glob.test.js.map +1 -1
- package/dist/src/tools/grep.js +4 -10
- package/dist/src/tools/grep.js.map +1 -1
- package/dist/src/tools/ls.d.ts +1 -1
- package/dist/src/tools/ls.js +8 -7
- package/dist/src/tools/ls.js.map +1 -1
- package/dist/src/tools/ls.test.js +0 -7
- package/dist/src/tools/ls.test.js.map +1 -1
- package/dist/src/tools/mcp-client-manager.js +8 -6
- package/dist/src/tools/mcp-client-manager.js.map +1 -1
- package/dist/src/tools/mcp-client-manager.test.js +0 -10
- package/dist/src/tools/mcp-client-manager.test.js.map +1 -1
- package/dist/src/tools/memoryTool.js +10 -0
- package/dist/src/tools/memoryTool.js.map +1 -1
- package/dist/src/tools/process-manager.js +6 -5
- package/dist/src/tools/process-manager.js.map +1 -1
- package/dist/src/tools/process-manager.test.js +2 -1
- package/dist/src/tools/process-manager.test.js.map +1 -1
- package/dist/src/tools/read-file.js +8 -10
- package/dist/src/tools/read-file.js.map +1 -1
- package/dist/src/tools/read-file.test.js +0 -12
- package/dist/src/tools/read-file.test.js.map +1 -1
- package/dist/src/tools/read-many-files.js +2 -7
- package/dist/src/tools/read-many-files.js.map +1 -1
- package/dist/src/tools/repl.js +10 -45
- package/dist/src/tools/repl.js.map +1 -1
- package/dist/src/tools/ripGrep.js +2 -5
- package/dist/src/tools/ripGrep.js.map +1 -1
- package/dist/src/tools/ripGrep.test.js +1 -1
- package/dist/src/tools/ripGrep.test.js.map +1 -1
- package/dist/src/tools/shell.d.ts +2 -11
- package/dist/src/tools/shell.js +31 -191
- package/dist/src/tools/shell.js.map +1 -1
- package/dist/src/tools/shell.test.js +2 -1
- package/dist/src/tools/shell.test.js.map +1 -1
- package/dist/src/tools/smart-edit.js +2 -5
- package/dist/src/tools/smart-edit.js.map +1 -1
- package/dist/src/tools/smart-edit.test.js +0 -9
- package/dist/src/tools/smart-edit.test.js.map +1 -1
- package/dist/src/tools/tools.d.ts +5 -0
- package/dist/src/tools/tools.js.map +1 -1
- package/dist/src/tools/ui-click.js +69 -3
- package/dist/src/tools/ui-click.js.map +1 -1
- package/dist/src/tools/write-file.js +34 -8
- package/dist/src/tools/write-file.js.map +1 -1
- package/dist/src/tools/write-file.test.js +1 -15
- package/dist/src/tools/write-file.test.js.map +1 -1
- package/dist/src/utils/errorReporting.js +1 -1
- package/dist/src/utils/errorReporting.js.map +1 -1
- package/dist/src/utils/errorReporting.test.js +1 -1
- package/dist/src/utils/errorReporting.test.js.map +1 -1
- package/dist/src/utils/events.d.ts +11 -0
- package/dist/src/utils/events.js +1 -0
- package/dist/src/utils/events.js.map +1 -1
- package/dist/src/utils/fileUtils.js +2 -7
- package/dist/src/utils/fileUtils.js.map +1 -1
- package/dist/src/utils/processUtils.d.ts +43 -0
- package/dist/src/utils/processUtils.js +134 -0
- package/dist/src/utils/processUtils.js.map +1 -0
- package/dist/src/utils/shell-permissions.d.ts +1 -0
- package/dist/src/utils/shell-permissions.js +3 -3
- package/dist/src/utils/shell-permissions.js.map +1 -1
- package/dist/src/utils/shell-permissions.test.js +11 -5
- package/dist/src/utils/shell-permissions.test.js.map +1 -1
- package/dist/src/utils/shell-utils.js +6 -3
- package/dist/src/utils/shell-utils.js.map +1 -1
- package/dist/src/utils/shell-utils.test.js +6 -2
- package/dist/src/utils/shell-utils.test.js.map +1 -1
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/package.json +5 -3
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import type { ChatGptOAuthCredentialPayload } from './types.js';
|
|
8
|
+
export interface ChatGptOAuthClientOptions {
|
|
9
|
+
readonly clientId?: string;
|
|
10
|
+
readonly authorizeUrl?: string;
|
|
11
|
+
readonly tokenUrl?: string;
|
|
12
|
+
readonly refreshStaleMs?: number;
|
|
13
|
+
}
|
|
14
|
+
export interface ChatGptOAuthStart {
|
|
15
|
+
readonly authUrl: string;
|
|
16
|
+
readonly state: string;
|
|
17
|
+
readonly codeVerifier: string;
|
|
18
|
+
}
|
|
19
|
+
/**
|
|
20
|
+
* Error thrown when OpenAI returns refresh_token_reused.
|
|
21
|
+
* This indicates the stored credentials are permanently invalid.
|
|
22
|
+
*/
|
|
23
|
+
export declare class RefreshTokenReusedError extends Error {
|
|
24
|
+
constructor(message: string);
|
|
25
|
+
}
|
|
26
|
+
export declare class ChatGptOAuthClient {
|
|
27
|
+
private readonly clientId;
|
|
28
|
+
private readonly authorizeUrl;
|
|
29
|
+
private readonly tokenUrl;
|
|
30
|
+
private readonly refreshStaleMs;
|
|
31
|
+
constructor(options?: ChatGptOAuthClientOptions);
|
|
32
|
+
startAuthorization(input: {
|
|
33
|
+
redirectUri: string;
|
|
34
|
+
scope?: string;
|
|
35
|
+
}): ChatGptOAuthStart;
|
|
36
|
+
exchangeAuthorizationCode(input: {
|
|
37
|
+
code: string;
|
|
38
|
+
redirectUri: string;
|
|
39
|
+
codeVerifier: string;
|
|
40
|
+
}): Promise<ChatGptOAuthCredentialPayload>;
|
|
41
|
+
refresh(input: {
|
|
42
|
+
refreshToken: string;
|
|
43
|
+
existingRefreshToken?: string;
|
|
44
|
+
}): Promise<ChatGptOAuthCredentialPayload>;
|
|
45
|
+
shouldRefreshByStaleness(lastRefresh: number | undefined): boolean;
|
|
46
|
+
deriveAccountId(input: {
|
|
47
|
+
accountId?: string;
|
|
48
|
+
idToken?: string;
|
|
49
|
+
accessToken?: string;
|
|
50
|
+
}): string | undefined;
|
|
51
|
+
private toCredentialPayloadFromTokenResponse;
|
|
52
|
+
}
|
|
@@ -0,0 +1,196 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import * as crypto from 'node:crypto';
|
|
8
|
+
import { URL } from 'node:url';
|
|
9
|
+
import { CHATGPT_ACCOUNT_ID_CLAIM, OPENAI_AUTH_CLAIM, OPENAI_AUTH_CHATGPT_ACCOUNT_ID_FIELD, CODEX_ORIGINATOR, DEFAULT_OPENAI_OAUTH_AUTHORIZE_URL, DEFAULT_OPENAI_OAUTH_CLIENT_ID, DEFAULT_OPENAI_OAUTH_TOKEN_URL, DEFAULT_REFRESH_STALE_MS, } from './constants.js';
|
|
10
|
+
import { decodeJwtPayload } from './jwt.js';
|
|
11
|
+
/**
|
|
12
|
+
* Error thrown when OpenAI returns refresh_token_reused.
|
|
13
|
+
* This indicates the stored credentials are permanently invalid.
|
|
14
|
+
*/
|
|
15
|
+
export class RefreshTokenReusedError extends Error {
|
|
16
|
+
constructor(message) {
|
|
17
|
+
super(message);
|
|
18
|
+
this.name = 'RefreshTokenReusedError';
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
export class ChatGptOAuthClient {
|
|
22
|
+
clientId;
|
|
23
|
+
authorizeUrl;
|
|
24
|
+
tokenUrl;
|
|
25
|
+
refreshStaleMs;
|
|
26
|
+
constructor(options = {}) {
|
|
27
|
+
this.clientId =
|
|
28
|
+
options.clientId ??
|
|
29
|
+
process.env['TERMINAI_OPENAI_OAUTH_CLIENT_ID'] ??
|
|
30
|
+
DEFAULT_OPENAI_OAUTH_CLIENT_ID;
|
|
31
|
+
this.authorizeUrl =
|
|
32
|
+
options.authorizeUrl ?? DEFAULT_OPENAI_OAUTH_AUTHORIZE_URL;
|
|
33
|
+
this.tokenUrl = options.tokenUrl ?? DEFAULT_OPENAI_OAUTH_TOKEN_URL;
|
|
34
|
+
this.refreshStaleMs = options.refreshStaleMs ?? DEFAULT_REFRESH_STALE_MS;
|
|
35
|
+
}
|
|
36
|
+
startAuthorization(input) {
|
|
37
|
+
const { codeVerifier, codeChallenge } = generatePkceS256();
|
|
38
|
+
const state = crypto.randomBytes(16).toString('base64url');
|
|
39
|
+
const scope = input.scope ?? 'openid profile email offline_access';
|
|
40
|
+
const url = new URL(this.authorizeUrl);
|
|
41
|
+
url.searchParams.set('client_id', this.clientId);
|
|
42
|
+
url.searchParams.set('redirect_uri', input.redirectUri);
|
|
43
|
+
url.searchParams.set('response_type', 'code');
|
|
44
|
+
url.searchParams.set('scope', scope);
|
|
45
|
+
url.searchParams.set('code_challenge', codeChallenge);
|
|
46
|
+
url.searchParams.set('code_challenge_method', 'S256');
|
|
47
|
+
url.searchParams.set('state', state);
|
|
48
|
+
// Codex CLI parity flags (stability-first)
|
|
49
|
+
url.searchParams.set('id_token_add_organizations', 'true');
|
|
50
|
+
url.searchParams.set('codex_cli_simplified_flow', 'true');
|
|
51
|
+
url.searchParams.set('originator', CODEX_ORIGINATOR);
|
|
52
|
+
return { authUrl: url.toString(), state, codeVerifier };
|
|
53
|
+
}
|
|
54
|
+
async exchangeAuthorizationCode(input) {
|
|
55
|
+
const body = new URLSearchParams();
|
|
56
|
+
body.set('grant_type', 'authorization_code');
|
|
57
|
+
body.set('code', input.code);
|
|
58
|
+
body.set('redirect_uri', input.redirectUri);
|
|
59
|
+
body.set('client_id', this.clientId);
|
|
60
|
+
body.set('code_verifier', input.codeVerifier);
|
|
61
|
+
const response = await fetch(this.tokenUrl, {
|
|
62
|
+
method: 'POST',
|
|
63
|
+
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
|
|
64
|
+
body: body.toString(),
|
|
65
|
+
});
|
|
66
|
+
if (!response.ok) {
|
|
67
|
+
const text = await response.text().catch(() => '');
|
|
68
|
+
throw new Error(`OpenAI OAuth token exchange failed (${response.status}): ${text}`);
|
|
69
|
+
}
|
|
70
|
+
const json = (await response.json());
|
|
71
|
+
return this.toCredentialPayloadFromTokenResponse(json);
|
|
72
|
+
}
|
|
73
|
+
async refresh(input) {
|
|
74
|
+
const response = await fetch(this.tokenUrl, {
|
|
75
|
+
method: 'POST',
|
|
76
|
+
headers: { 'Content-Type': 'application/json' },
|
|
77
|
+
body: JSON.stringify({
|
|
78
|
+
client_id: this.clientId,
|
|
79
|
+
grant_type: 'refresh_token',
|
|
80
|
+
refresh_token: input.refreshToken,
|
|
81
|
+
scope: 'openid profile email',
|
|
82
|
+
}),
|
|
83
|
+
});
|
|
84
|
+
if (!response.ok) {
|
|
85
|
+
const text = await response.text().catch(() => '');
|
|
86
|
+
// Detect refresh_token_reused error - this means stored creds are permanently invalid
|
|
87
|
+
if (response.status === 401 && text.includes('refresh_token_reused')) {
|
|
88
|
+
throw new RefreshTokenReusedError('ChatGPT OAuth session expired. Your refresh token was already used. Run /auth reset then /auth wizard to re-authenticate.');
|
|
89
|
+
}
|
|
90
|
+
throw new Error(`OpenAI OAuth refresh failed (${response.status}): ${text}`);
|
|
91
|
+
}
|
|
92
|
+
const json = (await response.json());
|
|
93
|
+
return this.toCredentialPayloadFromTokenResponse(json, {
|
|
94
|
+
existingRefreshToken: input.existingRefreshToken,
|
|
95
|
+
});
|
|
96
|
+
}
|
|
97
|
+
shouldRefreshByStaleness(lastRefresh) {
|
|
98
|
+
if (typeof lastRefresh !== 'number' || !Number.isFinite(lastRefresh)) {
|
|
99
|
+
return true;
|
|
100
|
+
}
|
|
101
|
+
return Date.now() - lastRefresh >= this.refreshStaleMs;
|
|
102
|
+
}
|
|
103
|
+
deriveAccountId(input) {
|
|
104
|
+
if (input.accountId && input.accountId.trim().length > 0) {
|
|
105
|
+
return input.accountId.trim();
|
|
106
|
+
}
|
|
107
|
+
const idToken = input.idToken?.trim();
|
|
108
|
+
if (idToken) {
|
|
109
|
+
const claim = tryGetChatGptAccountIdClaim(idToken);
|
|
110
|
+
if (claim)
|
|
111
|
+
return claim;
|
|
112
|
+
}
|
|
113
|
+
const accessToken = input.accessToken?.trim();
|
|
114
|
+
if (accessToken) {
|
|
115
|
+
const claim = tryGetChatGptAccountIdClaim(accessToken);
|
|
116
|
+
if (claim)
|
|
117
|
+
return claim;
|
|
118
|
+
}
|
|
119
|
+
return undefined;
|
|
120
|
+
}
|
|
121
|
+
toCredentialPayloadFromTokenResponse(tokenResponse, options) {
|
|
122
|
+
if (!tokenResponse.access_token ||
|
|
123
|
+
tokenResponse.access_token.length === 0) {
|
|
124
|
+
throw new Error('OpenAI OAuth token response missing access_token');
|
|
125
|
+
}
|
|
126
|
+
const refreshToken = tokenResponse.refresh_token && tokenResponse.refresh_token.length > 0
|
|
127
|
+
? tokenResponse.refresh_token
|
|
128
|
+
: options?.existingRefreshToken;
|
|
129
|
+
if (!refreshToken || refreshToken.length === 0) {
|
|
130
|
+
throw new Error('OpenAI OAuth token response missing refresh_token');
|
|
131
|
+
}
|
|
132
|
+
const idToken = typeof tokenResponse.id_token === 'string' &&
|
|
133
|
+
tokenResponse.id_token.trim().length > 0
|
|
134
|
+
? tokenResponse.id_token
|
|
135
|
+
: undefined;
|
|
136
|
+
const expiresAt = typeof tokenResponse.expires_in === 'number' &&
|
|
137
|
+
Number.isFinite(tokenResponse.expires_in) &&
|
|
138
|
+
tokenResponse.expires_in > 0
|
|
139
|
+
? Date.now() + tokenResponse.expires_in * 1000
|
|
140
|
+
: undefined;
|
|
141
|
+
const token = {
|
|
142
|
+
accessToken: tokenResponse.access_token,
|
|
143
|
+
refreshToken,
|
|
144
|
+
tokenType: 'Bearer',
|
|
145
|
+
idToken,
|
|
146
|
+
expiresAt,
|
|
147
|
+
scope: tokenResponse.scope,
|
|
148
|
+
};
|
|
149
|
+
const accountId = this.deriveAccountId({
|
|
150
|
+
idToken,
|
|
151
|
+
accessToken: token.accessToken,
|
|
152
|
+
});
|
|
153
|
+
if (!accountId) {
|
|
154
|
+
throw new Error('ChatGPT OAuth account id is missing. Re-authenticate to obtain an id_token with chatgpt_account_id.');
|
|
155
|
+
}
|
|
156
|
+
return {
|
|
157
|
+
token,
|
|
158
|
+
accountId,
|
|
159
|
+
lastRefresh: Date.now(),
|
|
160
|
+
};
|
|
161
|
+
}
|
|
162
|
+
}
|
|
163
|
+
function generatePkceS256() {
|
|
164
|
+
const codeVerifier = crypto.randomBytes(32).toString('base64url');
|
|
165
|
+
const codeChallenge = crypto
|
|
166
|
+
.createHash('sha256')
|
|
167
|
+
.update(codeVerifier)
|
|
168
|
+
.digest('base64url');
|
|
169
|
+
return { codeVerifier, codeChallenge };
|
|
170
|
+
}
|
|
171
|
+
function tryGetChatGptAccountIdClaim(token) {
|
|
172
|
+
try {
|
|
173
|
+
const payload = decodeJwtPayload(token);
|
|
174
|
+
// Preferred: nested object at https://api.openai.com/auth
|
|
175
|
+
const authObj = payload[OPENAI_AUTH_CLAIM];
|
|
176
|
+
if (isPlainObject(authObj)) {
|
|
177
|
+
const accountId = authObj[OPENAI_AUTH_CHATGPT_ACCOUNT_ID_FIELD];
|
|
178
|
+
if (typeof accountId === 'string' && accountId.trim().length > 0) {
|
|
179
|
+
return accountId.trim();
|
|
180
|
+
}
|
|
181
|
+
}
|
|
182
|
+
// Fallback: legacy flat claim
|
|
183
|
+
const legacy = payload[CHATGPT_ACCOUNT_ID_CLAIM];
|
|
184
|
+
if (typeof legacy === 'string' && legacy.trim().length > 0) {
|
|
185
|
+
return legacy.trim();
|
|
186
|
+
}
|
|
187
|
+
return undefined;
|
|
188
|
+
}
|
|
189
|
+
catch {
|
|
190
|
+
return undefined;
|
|
191
|
+
}
|
|
192
|
+
}
|
|
193
|
+
function isPlainObject(value) {
|
|
194
|
+
return typeof value === 'object' && value !== null && !Array.isArray(value);
|
|
195
|
+
}
|
|
196
|
+
//# sourceMappingURL=oauthClient.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"oauthClient.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/oauthClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,oCAAoC,EACpC,gBAAgB,EAChB,kCAAkC,EAClC,8BAA8B,EAC9B,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAe5C;;;GAGG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IACZ,QAAQ,CAAS;IACjB,YAAY,CAAS;IACrB,QAAQ,CAAS;IACjB,cAAc,CAAS;IAExC,YAAY,UAAqC,EAAE;QACjD,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC;gBAC9C,8BAA8B,CAAC;QACjC,IAAI,CAAC,YAAY;YACf,OAAO,CAAC,YAAY,IAAI,kCAAkC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,8BAA8B,CAAC;QACnE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC3E,CAAC;IAED,kBAAkB,CAAC,KAGlB;QACC,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,qCAAqC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAErC,2CAA2C;QAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAErD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,KAI/B;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,OAAO,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAGb;QACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,KAAK,CAAC,YAAY;gBACjC,KAAK,EAAE,sBAAsB;aAC9B,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAEnD,sFAAsF;YACtF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,uBAAuB,CAC/B,2HAA2H,CAC5H,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,OAAO,IAAI,CAAC,oCAAoC,CAAC,IAAI,EAAE;YACrD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACjD,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB,CAAC,WAA+B;QACtD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC;IACzD,CAAC;IAED,eAAe,CAAC,KAIf;QACC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;YACvD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,oCAAoC,CAC1C,aAAuC,EACvC,OAA2C;QAE3C,IACE,CAAC,aAAa,CAAC,YAAY;YAC3B,aAAa,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EACvC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,YAAY,GAChB,aAAa,CAAC,aAAa,IAAI,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,aAAa,CAAC,aAAa;YAC7B,CAAC,CAAC,OAAO,EAAE,oBAAoB,CAAC;QACpC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GACX,OAAO,aAAa,CAAC,QAAQ,KAAK,QAAQ;YAC1C,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,aAAa,CAAC,QAAQ;YACxB,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,SAAS,GACb,OAAO,aAAa,CAAC,UAAU,KAAK,QAAQ;YAC5C,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC;YACzC,aAAa,CAAC,UAAU,GAAG,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI;YAC9C,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,KAAK,GAAuB;YAChC,WAAW,EAAE,aAAa,CAAC,YAAY;YACvC,YAAY;YACZ,SAAS,EAAE,QAAQ;YACnB,OAAO;YACP,SAAS;YACT,KAAK,EAAE,aAAa,CAAC,KAAK;SAC3B,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC;YACrC,OAAO;YACP,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK;YACL,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;IACJ,CAAC;CACF;AAED,SAAS,gBAAgB;IACvB,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,MAAM;SACzB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,YAAY,CAAC;SACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAExC,0DAA0D;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3C,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAChE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}
|
|
@@ -0,0 +1,138 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import { describe, it, expect, vi, beforeEach } from 'vitest';
|
|
8
|
+
import { CHATGPT_ACCOUNT_ID_CLAIM, CODEX_ORIGINATOR, DEFAULT_OPENAI_OAUTH_AUTHORIZE_URL, DEFAULT_OPENAI_OAUTH_TOKEN_URL, OPENAI_AUTH_CLAIM, } from './constants.js';
|
|
9
|
+
import { ChatGptOAuthClient } from './oauthClient.js';
|
|
10
|
+
function jwt(payload) {
|
|
11
|
+
const header = Buffer.from(JSON.stringify({ alg: 'none' })).toString('base64url');
|
|
12
|
+
const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
|
|
13
|
+
return `${header}.${body}.`;
|
|
14
|
+
}
|
|
15
|
+
describe('ChatGptOAuthClient', () => {
|
|
16
|
+
beforeEach(() => {
|
|
17
|
+
vi.unstubAllEnvs();
|
|
18
|
+
global.fetch = vi.fn();
|
|
19
|
+
});
|
|
20
|
+
it('builds auth URL with Codex CLI params', () => {
|
|
21
|
+
const client = new ChatGptOAuthClient({
|
|
22
|
+
clientId: 'client123',
|
|
23
|
+
authorizeUrl: DEFAULT_OPENAI_OAUTH_AUTHORIZE_URL,
|
|
24
|
+
});
|
|
25
|
+
const start = client.startAuthorization({
|
|
26
|
+
redirectUri: 'http://localhost:1455/auth/callback',
|
|
27
|
+
});
|
|
28
|
+
const url = new URL(start.authUrl);
|
|
29
|
+
expect(url.origin + url.pathname).toBe(DEFAULT_OPENAI_OAUTH_AUTHORIZE_URL);
|
|
30
|
+
expect(url.searchParams.get('client_id')).toBe('client123');
|
|
31
|
+
expect(url.searchParams.get('redirect_uri')).toBe('http://localhost:1455/auth/callback');
|
|
32
|
+
expect(url.searchParams.get('response_type')).toBe('code');
|
|
33
|
+
expect(url.searchParams.get('scope')).toContain('offline_access');
|
|
34
|
+
expect(url.searchParams.get('code_challenge_method')).toBe('S256');
|
|
35
|
+
expect(url.searchParams.get('state')).toBeTruthy();
|
|
36
|
+
expect(url.searchParams.get('originator')).toBe(CODEX_ORIGINATOR);
|
|
37
|
+
expect(url.searchParams.get('codex_cli_simplified_flow')).toBe('true');
|
|
38
|
+
expect(url.searchParams.get('id_token_add_organizations')).toBe('true');
|
|
39
|
+
expect(start.codeVerifier.length).toBeGreaterThan(10);
|
|
40
|
+
});
|
|
41
|
+
it('exchanges code with x-www-form-urlencoded body', async () => {
|
|
42
|
+
const client = new ChatGptOAuthClient({
|
|
43
|
+
clientId: 'client123',
|
|
44
|
+
tokenUrl: DEFAULT_OPENAI_OAUTH_TOKEN_URL,
|
|
45
|
+
});
|
|
46
|
+
vi.mocked(global.fetch).mockResolvedValue({
|
|
47
|
+
ok: true,
|
|
48
|
+
json: async () => ({
|
|
49
|
+
access_token: 'access',
|
|
50
|
+
refresh_token: 'refresh',
|
|
51
|
+
token_type: 'Bearer',
|
|
52
|
+
id_token: jwt({
|
|
53
|
+
[OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_test' },
|
|
54
|
+
}),
|
|
55
|
+
}),
|
|
56
|
+
});
|
|
57
|
+
await client.exchangeAuthorizationCode({
|
|
58
|
+
code: 'code123',
|
|
59
|
+
redirectUri: 'http://localhost:1455/auth/callback',
|
|
60
|
+
codeVerifier: 'verifier123',
|
|
61
|
+
});
|
|
62
|
+
expect(global.fetch).toHaveBeenCalledWith(DEFAULT_OPENAI_OAUTH_TOKEN_URL, expect.objectContaining({
|
|
63
|
+
method: 'POST',
|
|
64
|
+
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
|
|
65
|
+
body: expect.stringContaining('grant_type=authorization_code'),
|
|
66
|
+
}));
|
|
67
|
+
const init = vi.mocked(global.fetch).mock.calls[0]?.[1];
|
|
68
|
+
const body = init?.body;
|
|
69
|
+
if (typeof body !== 'string')
|
|
70
|
+
throw new Error('Expected string body');
|
|
71
|
+
expect(body).toContain('code=code123');
|
|
72
|
+
expect(body).toContain('redirect_uri=');
|
|
73
|
+
expect(body).toContain('client_id=client123');
|
|
74
|
+
expect(body).toContain('code_verifier=verifier123');
|
|
75
|
+
});
|
|
76
|
+
it('refreshes tokens with JSON body and scope without offline_access', async () => {
|
|
77
|
+
const client = new ChatGptOAuthClient({
|
|
78
|
+
clientId: 'client123',
|
|
79
|
+
tokenUrl: DEFAULT_OPENAI_OAUTH_TOKEN_URL,
|
|
80
|
+
});
|
|
81
|
+
vi.mocked(global.fetch).mockResolvedValue({
|
|
82
|
+
ok: true,
|
|
83
|
+
json: async () => ({
|
|
84
|
+
access_token: 'access2',
|
|
85
|
+
refresh_token: 'refresh2',
|
|
86
|
+
token_type: 'Bearer',
|
|
87
|
+
id_token: jwt({
|
|
88
|
+
[OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_test' },
|
|
89
|
+
}),
|
|
90
|
+
}),
|
|
91
|
+
});
|
|
92
|
+
await client.refresh({ refreshToken: 'refresh' });
|
|
93
|
+
expect(global.fetch).toHaveBeenCalledWith(DEFAULT_OPENAI_OAUTH_TOKEN_URL, expect.objectContaining({
|
|
94
|
+
method: 'POST',
|
|
95
|
+
headers: { 'Content-Type': 'application/json' },
|
|
96
|
+
body: expect.stringContaining('"grant_type":"refresh_token"'),
|
|
97
|
+
}));
|
|
98
|
+
const init = vi.mocked(global.fetch).mock.calls[0]?.[1];
|
|
99
|
+
const rawBody = init?.body;
|
|
100
|
+
if (typeof rawBody !== 'string')
|
|
101
|
+
throw new Error('Expected string body');
|
|
102
|
+
const body = JSON.parse(rawBody);
|
|
103
|
+
expect(body['scope']).toBe('openid profile email');
|
|
104
|
+
});
|
|
105
|
+
it('derives account id from id token claim', () => {
|
|
106
|
+
const client = new ChatGptOAuthClient();
|
|
107
|
+
const token = jwt({
|
|
108
|
+
[OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_123' },
|
|
109
|
+
});
|
|
110
|
+
expect(client.deriveAccountId({ idToken: token })).toBe('acct_123');
|
|
111
|
+
});
|
|
112
|
+
it('derives account id from legacy flat claim', () => {
|
|
113
|
+
const client = new ChatGptOAuthClient();
|
|
114
|
+
const token = jwt({ [CHATGPT_ACCOUNT_ID_CLAIM]: 'acct_legacy' });
|
|
115
|
+
expect(client.deriveAccountId({ accessToken: token })).toBe('acct_legacy');
|
|
116
|
+
});
|
|
117
|
+
it('throws when exchange code returns token without account id', async () => {
|
|
118
|
+
const client = new ChatGptOAuthClient({
|
|
119
|
+
clientId: 'client123',
|
|
120
|
+
tokenUrl: DEFAULT_OPENAI_OAUTH_TOKEN_URL,
|
|
121
|
+
});
|
|
122
|
+
vi.mocked(global.fetch).mockResolvedValue({
|
|
123
|
+
ok: true,
|
|
124
|
+
json: async () => ({
|
|
125
|
+
access_token: 'access_no_acct',
|
|
126
|
+
refresh_token: 'refresh',
|
|
127
|
+
token_type: 'Bearer',
|
|
128
|
+
id_token: jwt({ sub: 'no_account_id' }), // No account ID claim
|
|
129
|
+
}),
|
|
130
|
+
});
|
|
131
|
+
await expect(client.exchangeAuthorizationCode({
|
|
132
|
+
code: 'code123',
|
|
133
|
+
redirectUri: 'uri',
|
|
134
|
+
codeVerifier: 'verifier',
|
|
135
|
+
})).rejects.toThrow('ChatGPT OAuth account id is missing');
|
|
136
|
+
});
|
|
137
|
+
});
|
|
138
|
+
//# sourceMappingURL=oauthClient.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"oauthClient.test.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/oauthClient.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,kCAAkC,EAClC,8BAA8B,EAC9B,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,SAAS,GAAG,CAAC,OAAgC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAClE,WAAW,CACZ,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,GAAG,CAAC;AAC9B,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC;YACpC,QAAQ,EAAE,WAAW;YACrB,YAAY,EAAE,kCAAkC;SACjD,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAC;YACtC,WAAW,EAAE,qCAAqC;SACnD,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAC/C,qCAAqC,CACtC,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC;YACpC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,8BAA8B;SACzC,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACxC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACjB,YAAY,EAAE,QAAQ;gBACtB,aAAa,EAAE,SAAS;gBACxB,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,GAAG,CAAC;oBACZ,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE;iBACzD,CAAC;aACH,CAAC;SACS,CAAC,CAAC;QAEf,MAAM,MAAM,CAAC,yBAAyB,CAAC;YACrC,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,qCAAqC;YAClD,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,8BAA8B,EAC9B,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,+BAA+B,CAAC;SAC/D,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC;YACpC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,8BAA8B;SACzC,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACxC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACjB,YAAY,EAAE,SAAS;gBACvB,aAAa,EAAE,UAAU;gBACzB,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,GAAG,CAAC;oBACZ,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE;iBACzD,CAAC;aACH,CAAC;SACS,CAAC,CAAC;QAEf,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QAElD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,8BAA8B,EAC9B,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,8BAA8B,CAAC;SAC9D,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,CAAC;QAC3B,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEzE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC;YAChB,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,UAAU,EAAE;SACxD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC;YACpC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,8BAA8B;SACzC,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACxC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACjB,YAAY,EAAE,gBAAgB;gBAC9B,aAAa,EAAE,SAAS;gBACxB,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,EAAE,sBAAsB;aAChE,CAAC;SACS,CAAC,CAAC;QAEf,MAAM,MAAM,CACV,MAAM,CAAC,yBAAyB,CAAC;YAC/B,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,UAAU;SACzB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @license
|
|
3
|
+
* Copyright 2025 Google LLC
|
|
4
|
+
* Portions Copyright 2025 TerminaI Authors
|
|
5
|
+
* SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
import type { OAuthCredentials } from '../mcp/token-storage/types.js';
|
|
8
|
+
export interface OpenAIOAuthTokenResponse {
|
|
9
|
+
readonly access_token: string;
|
|
10
|
+
readonly token_type: string;
|
|
11
|
+
readonly refresh_token?: string;
|
|
12
|
+
readonly id_token?: string;
|
|
13
|
+
readonly expires_in?: number;
|
|
14
|
+
readonly scope?: string;
|
|
15
|
+
}
|
|
16
|
+
export interface ChatGptOAuthStoredCredentials extends OAuthCredentials {
|
|
17
|
+
readonly credentialType: 'openai-chatgpt';
|
|
18
|
+
readonly idToken?: string;
|
|
19
|
+
readonly accountId?: string;
|
|
20
|
+
readonly lastRefresh?: number;
|
|
21
|
+
}
|
|
22
|
+
export interface ChatGptOAuthTokens {
|
|
23
|
+
readonly accessToken: string;
|
|
24
|
+
readonly refreshToken: string;
|
|
25
|
+
readonly tokenType: 'Bearer';
|
|
26
|
+
readonly idToken?: string;
|
|
27
|
+
readonly expiresAt?: number;
|
|
28
|
+
readonly scope?: string;
|
|
29
|
+
}
|
|
30
|
+
export interface ChatGptOAuthCredentialPayload {
|
|
31
|
+
readonly token: ChatGptOAuthTokens;
|
|
32
|
+
readonly accountId?: string;
|
|
33
|
+
readonly lastRefresh?: number;
|
|
34
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}
|
|
@@ -7,7 +7,8 @@
|
|
|
7
7
|
import { describe, it, expect, beforeEach } from 'vitest';
|
|
8
8
|
import { PolicyEngine } from './policy-engine.js';
|
|
9
9
|
import { PolicyDecision } from './types.js';
|
|
10
|
-
|
|
10
|
+
// Skip on Windows - shell parsing times out
|
|
11
|
+
describe.skipIf(process.platform === 'win32')('Shell Safety Policy', () => {
|
|
11
12
|
let policyEngine;
|
|
12
13
|
beforeEach(() => {
|
|
13
14
|
policyEngine = new PolicyEngine({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"shell-safety.test.js","sourceRoot":"","sources":["../../../src/policy/shell-safety.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;
|
|
1
|
+
{"version":3,"file":"shell-safety.test.js","sourceRoot":"","sources":["../../../src/policy/shell-safety.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,4CAA4C;AAC5C,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACxE,IAAI,YAA0B,CAAC;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,YAAY,GAAG,IAAI,YAAY,CAAC;YAC9B,KAAK,EAAE;gBACL;oBACE,QAAQ,EAAE,mBAAmB;oBAC7B,2EAA2E;oBAC3E,uCAAuC;oBACvC,WAAW,EAAE,+BAA+B;oBAC5C,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,QAAQ,EAAE,IAAI,EAAE,+BAA+B;iBAChD;aACF;YACD,eAAe,EAAE,cAAc,CAAC,QAAQ;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;SAC7B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE;SACvC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;SAChC,CAAC;QAEF,uDAAuD;QACvD,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;QACpH,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;SACzC,CAAC;QAEF,yEAAyE;QACzE,qEAAqE;QACrE,gCAAgC;QAChC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;SAC1C,CAAC;QAEF,gFAAgF;QAChF,6EAA6E;QAC7E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -7,7 +7,8 @@
|
|
|
7
7
|
import { describe, it, expect } from 'vitest';
|
|
8
8
|
import { buildShellActionProfile } from '../buildShellActionProfile.js';
|
|
9
9
|
import { computeMinimumReviewLevel } from '../computeMinimumReviewLevel.js';
|
|
10
|
-
|
|
10
|
+
// Skip entire test suite on Windows - tests bash shell parsing which is slow/broken on Windows
|
|
11
|
+
describe.skipIf(process.platform === 'win32')('buildShellActionProfile', () => {
|
|
11
12
|
const mockConfig = {
|
|
12
13
|
getSecurityProfile: () => 'balanced',
|
|
13
14
|
getApprovalPin: () => undefined,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"buildShellActionProfile.test.js","sourceRoot":"","sources":["../../../../../src/safety/approval-ladder/__tests__/buildShellActionProfile.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;
|
|
1
|
+
{"version":3,"file":"buildShellActionProfile.test.js","sourceRoot":"","sources":["../../../../../src/safety/approval-ladder/__tests__/buildShellActionProfile.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG5E,+FAA+F;AAC/F,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,yBAAyB,EAAE,GAAG,EAAE;IAC5E,MAAM,UAAU,GAAG;QACjB,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU;QACpC,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;QAC/B,iBAAiB,EAAE,GAAG,EAAE,CAAC,EAAE;QAC3B,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE;QAC1B,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QAClE,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY;KACZ,CAAC;IAEvB,MAAM,UAAU,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,oBAAoB,CAAC;IAEjC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,SAAS;gBAClB,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE7C,+BAA+B;YAC/B,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,UAAU;gBACnB,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,+BAA+B;YAC/B,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;YACtF,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,yBAAyB;gBAClC,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,+BAA+B;YAC/B,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,uBAAuB;gBAChC,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,wBAAwB;gBACjC,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,0BAA0B;gBACnC,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,8BAA8B;gBACvC,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAE/C,+BAA+B;YAC/B,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,MAAM;gBACf,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,gBAAgB;gBACzB,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,UAAU;gBACnB,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,QAAQ;gBACjB,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,OAAO,EAAE,YAAY;gBAC9B,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE5C,2CAA2C;YAC3C,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,UAAU;gBACnB,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,UAAU;gBACnB,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,UAAU;gBACnB,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,uBAAuB;gBAChC,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,kBAAkB,EAAE,GAAG,EAAE;QACrE,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,wBAAwB;gBACjC,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,OAAO,GAAG,uBAAuB,CAAC;gBACtC,OAAO,EAAE,4BAA4B;gBACrC,GAAG;gBACH,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -100,7 +100,8 @@ describe('AllowedPathChecker', () => {
|
|
|
100
100
|
const result = await checker.check(input);
|
|
101
101
|
expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
|
|
102
102
|
});
|
|
103
|
-
|
|
103
|
+
// Skip on Windows - symlinks require admin privileges
|
|
104
|
+
it.skipIf(process.platform === 'win32')('should deny access if path contains a symlink pointing outside allowed directories', async () => {
|
|
104
105
|
const symlinkPath = path.join(mockCwd, 'symlink');
|
|
105
106
|
const targetPath = path.join(testRootDir, 'etc', 'passwd');
|
|
106
107
|
await fs.mkdir(path.dirname(targetPath), { recursive: true });
|
|
@@ -112,7 +113,8 @@ describe('AllowedPathChecker', () => {
|
|
|
112
113
|
expect(result.decision).toBe(SafetyCheckDecision.DENY);
|
|
113
114
|
expect(result.reason).toContain('outside of the allowed workspace directories');
|
|
114
115
|
});
|
|
115
|
-
|
|
116
|
+
// Skip on Windows - symlinks require admin privileges
|
|
117
|
+
it.skipIf(process.platform === 'win32')('should allow access if path contains a symlink pointing INSIDE allowed directories', async () => {
|
|
116
118
|
const symlinkPath = path.join(mockCwd, 'symlink-inside');
|
|
117
119
|
const realFilePath = path.join(mockCwd, 'real-file');
|
|
118
120
|
await fs.writeFile(realFilePath, 'real content');
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"built-in.test.js","sourceRoot":"","sources":["../../../src/safety/built-in.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGpD,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,OAA2B,CAAC;IAChC,IAAI,WAAmB,CAAC;IACxB,IAAI,OAAe,CAAC;IACpB,IAAI,cAAwB,CAAC;IAE7B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACnC,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QACvE,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,cAAc,GAAG;YACf,OAAO;YACP,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC;SACxD,CAAC;QACF,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAClB,QAAiC,EACjC,MAAgC,EACd,EAAE,CAAC,CAAC;QACtB,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE;YACR,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;SACY;QAC5B,OAAO,EAAE;YACP,WAAW,EAAE;gBACX,GAAG,EAAE,OAAO;gBACZ,UAAU,EAAE,cAAc;aAC3B;SACF;QACD,MAAM;KACP,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAE9C,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,
|
|
1
|
+
{"version":3,"file":"built-in.test.js","sourceRoot":"","sources":["../../../src/safety/built-in.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGpD,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,OAA2B,CAAC;IAChC,IAAI,WAAmB,CAAC;IACxB,IAAI,OAAe,CAAC;IACpB,IAAI,cAAwB,CAAC;IAE7B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACnC,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QACvE,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,cAAc,GAAG;YACf,OAAO;YACP,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC;SACxD,CAAC;QACF,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAClB,QAAiC,EACjC,MAAgC,EACd,EAAE,CAAC,CAAC;QACtB,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE;YACR,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;SACY;QAC5B,OAAO,EAAE;YACP,WAAW,EAAE;gBACX,GAAG,EAAE,OAAO;gBACZ,UAAU,EAAE,cAAc;aAC3B;SACF;QACD,MAAM;KACP,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAE9C,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CACrC,oFAAoF,EACpF,KAAK,IAAI,EAAE;QACT,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEzC,gDAAgD;QAChD,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAC7B,8CAA8C,CAC/C,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,sDAAsD;IACtD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CACrC,oFAAoF,EACpF,KAAK,IAAI,EAAE;QACT,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAEjD,8DAA8D;QAC9D,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CACvB,EAAE,UAAU,EAAE,WAAW,EAAE,EAC3B,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAClC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,sDAAsD;QACtD,MAAM,KAAK,GAAG,WAAW,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,EACrB,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,CAC5B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CACvB;YACE,IAAI,EAAE,WAAW,EAAE,WAAW;YAC9B,UAAU,EAAE,WAAW,EAAE,WAAW;SACrC,EACD;YACE,aAAa,EAAE,CAAC,MAAM,CAAC;YACvB,aAAa,EAAE,CAAC,YAAY,CAAC;SAC9B,CACF,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,mDAAmD;QACnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,MAAM,EAAE;gBACN,IAAI,EAAE,WAAW;aAClB;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CACvB;YACE,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW;aACpB;SACF,EACD,EAAE,aAAa,EAAE,CAAC,eAAe,CAAC,EAAE,CACrC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CACvB;YACE,MAAM,EAAE;gBACN,IAAI,EAAE,WAAW;aAClB;SACF,EACD,EAAE,aAAa,EAAE,CAAC,aAAa,CAAC,EAAE,CACnC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|