@thevinci/web 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (337) hide show
  1. package/README.md +197 -0
  2. package/bin/cli-entry.js +55 -0
  3. package/bin/cli-output.js +145 -0
  4. package/bin/cli.js +4887 -0
  5. package/bin/cli.test.js +64 -0
  6. package/dist/apple-touch-icon-120x120.png +0 -0
  7. package/dist/apple-touch-icon-152x152.png +0 -0
  8. package/dist/apple-touch-icon-167x167.png +0 -0
  9. package/dist/apple-touch-icon-180x180.png +0 -0
  10. package/dist/apple-touch-icon.png +0 -0
  11. package/dist/apple-touch-icon.svg +528 -0
  12. package/dist/assets/JsonTreeView-CSm9OzXG.js +1 -0
  13. package/dist/assets/KaTeX_AMS-Regular-BQhdFMY1.woff2 +0 -0
  14. package/dist/assets/KaTeX_AMS-Regular-DMm9YOAa.woff +0 -0
  15. package/dist/assets/KaTeX_AMS-Regular-DRggAlZN.ttf +0 -0
  16. package/dist/assets/KaTeX_Caligraphic-Bold-ATXxdsX0.ttf +0 -0
  17. package/dist/assets/KaTeX_Caligraphic-Bold-BEiXGLvX.woff +0 -0
  18. package/dist/assets/KaTeX_Caligraphic-Bold-Dq_IR9rO.woff2 +0 -0
  19. package/dist/assets/KaTeX_Caligraphic-Regular-CTRA-rTL.woff +0 -0
  20. package/dist/assets/KaTeX_Caligraphic-Regular-Di6jR-x-.woff2 +0 -0
  21. package/dist/assets/KaTeX_Caligraphic-Regular-wX97UBjC.ttf +0 -0
  22. package/dist/assets/KaTeX_Fraktur-Bold-BdnERNNW.ttf +0 -0
  23. package/dist/assets/KaTeX_Fraktur-Bold-BsDP51OF.woff +0 -0
  24. package/dist/assets/KaTeX_Fraktur-Bold-CL6g_b3V.woff2 +0 -0
  25. package/dist/assets/KaTeX_Fraktur-Regular-CB_wures.ttf +0 -0
  26. package/dist/assets/KaTeX_Fraktur-Regular-CTYiF6lA.woff2 +0 -0
  27. package/dist/assets/KaTeX_Fraktur-Regular-Dxdc4cR9.woff +0 -0
  28. package/dist/assets/KaTeX_Main-Bold-Cx986IdX.woff2 +0 -0
  29. package/dist/assets/KaTeX_Main-Bold-Jm3AIy58.woff +0 -0
  30. package/dist/assets/KaTeX_Main-Bold-waoOVXN0.ttf +0 -0
  31. package/dist/assets/KaTeX_Main-BoldItalic-DxDJ3AOS.woff2 +0 -0
  32. package/dist/assets/KaTeX_Main-BoldItalic-DzxPMmG6.ttf +0 -0
  33. package/dist/assets/KaTeX_Main-BoldItalic-SpSLRI95.woff +0 -0
  34. package/dist/assets/KaTeX_Main-Italic-3WenGoN9.ttf +0 -0
  35. package/dist/assets/KaTeX_Main-Italic-BMLOBm91.woff +0 -0
  36. package/dist/assets/KaTeX_Main-Italic-NWA7e6Wa.woff2 +0 -0
  37. package/dist/assets/KaTeX_Main-Regular-B22Nviop.woff2 +0 -0
  38. package/dist/assets/KaTeX_Main-Regular-Dr94JaBh.woff +0 -0
  39. package/dist/assets/KaTeX_Main-Regular-ypZvNtVU.ttf +0 -0
  40. package/dist/assets/KaTeX_Math-BoldItalic-B3XSjfu4.ttf +0 -0
  41. package/dist/assets/KaTeX_Math-BoldItalic-CZnvNsCZ.woff2 +0 -0
  42. package/dist/assets/KaTeX_Math-BoldItalic-iY-2wyZ7.woff +0 -0
  43. package/dist/assets/KaTeX_Math-Italic-DA0__PXp.woff +0 -0
  44. package/dist/assets/KaTeX_Math-Italic-flOr_0UB.ttf +0 -0
  45. package/dist/assets/KaTeX_Math-Italic-t53AETM-.woff2 +0 -0
  46. package/dist/assets/KaTeX_SansSerif-Bold-CFMepnvq.ttf +0 -0
  47. package/dist/assets/KaTeX_SansSerif-Bold-D1sUS0GD.woff2 +0 -0
  48. package/dist/assets/KaTeX_SansSerif-Bold-DbIhKOiC.woff +0 -0
  49. package/dist/assets/KaTeX_SansSerif-Italic-C3H0VqGB.woff2 +0 -0
  50. package/dist/assets/KaTeX_SansSerif-Italic-DN2j7dab.woff +0 -0
  51. package/dist/assets/KaTeX_SansSerif-Italic-YYjJ1zSn.ttf +0 -0
  52. package/dist/assets/KaTeX_SansSerif-Regular-BNo7hRIc.ttf +0 -0
  53. package/dist/assets/KaTeX_SansSerif-Regular-CS6fqUqJ.woff +0 -0
  54. package/dist/assets/KaTeX_SansSerif-Regular-DDBCnlJ7.woff2 +0 -0
  55. package/dist/assets/KaTeX_Script-Regular-C5JkGWo-.ttf +0 -0
  56. package/dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 +0 -0
  57. package/dist/assets/KaTeX_Script-Regular-D5yQViql.woff +0 -0
  58. package/dist/assets/KaTeX_Size1-Regular-C195tn64.woff +0 -0
  59. package/dist/assets/KaTeX_Size1-Regular-Dbsnue_I.ttf +0 -0
  60. package/dist/assets/KaTeX_Size1-Regular-mCD8mA8B.woff2 +0 -0
  61. package/dist/assets/KaTeX_Size2-Regular-B7gKUWhC.ttf +0 -0
  62. package/dist/assets/KaTeX_Size2-Regular-Dy4dx90m.woff2 +0 -0
  63. package/dist/assets/KaTeX_Size2-Regular-oD1tc_U0.woff +0 -0
  64. package/dist/assets/KaTeX_Size3-Regular-CTq5MqoE.woff +0 -0
  65. package/dist/assets/KaTeX_Size3-Regular-DgpXs0kz.ttf +0 -0
  66. package/dist/assets/KaTeX_Size4-Regular-BF-4gkZK.woff +0 -0
  67. package/dist/assets/KaTeX_Size4-Regular-DWFBv043.ttf +0 -0
  68. package/dist/assets/KaTeX_Size4-Regular-Dl5lxZxV.woff2 +0 -0
  69. package/dist/assets/KaTeX_Typewriter-Regular-C0xS9mPB.woff +0 -0
  70. package/dist/assets/KaTeX_Typewriter-Regular-CO6r4hn1.woff2 +0 -0
  71. package/dist/assets/KaTeX_Typewriter-Regular-D3Ib7_Hf.ttf +0 -0
  72. package/dist/assets/MarkdownRendererImpl-DensKOLc.js +6 -0
  73. package/dist/assets/MultiRunWindow-Bo7THayo.js +1 -0
  74. package/dist/assets/OnboardingScreen-BDqmzTVR.js +2 -0
  75. package/dist/assets/SettingsWindow-coz__Ykw.js +1 -0
  76. package/dist/assets/TerminalView-DrZ-i3Dr.js +1 -0
  77. package/dist/assets/ToolOutputDialog-Eglzslt3.js +16 -0
  78. package/dist/assets/es-4o9ciP61.js +15 -0
  79. package/dist/assets/ibm-plex-mono-latin-400-normal-CvHOgSBP.woff +0 -0
  80. package/dist/assets/ibm-plex-mono-latin-400-normal-DMJ8VG8y.woff2 +0 -0
  81. package/dist/assets/ibm-plex-mono-latin-500-normal-CB9ihrfo.woff +0 -0
  82. package/dist/assets/ibm-plex-mono-latin-500-normal-DSY6xOcd.woff2 +0 -0
  83. package/dist/assets/ibm-plex-mono-latin-600-normal-BgSNZQsw.woff2 +0 -0
  84. package/dist/assets/ibm-plex-mono-latin-600-normal-DWFSQ4vo.woff +0 -0
  85. package/dist/assets/ibm-plex-sans-latin-400-normal-CDDApCn2.woff2 +0 -0
  86. package/dist/assets/ibm-plex-sans-latin-400-normal-CYLoc0-x.woff +0 -0
  87. package/dist/assets/ibm-plex-sans-latin-500-normal-6ng42L7E.woff2 +0 -0
  88. package/dist/assets/ibm-plex-sans-latin-500-normal-BgVn5rGT.woff +0 -0
  89. package/dist/assets/ibm-plex-sans-latin-600-normal-Cu4Hd6ag.woff +0 -0
  90. package/dist/assets/ibm-plex-sans-latin-600-normal-CuJfVYMP.woff2 +0 -0
  91. package/dist/assets/index-DLTDToSP.css +1 -0
  92. package/dist/assets/index-DgiFEKGN.js +1 -0
  93. package/dist/assets/ko-B20imCHE.js +15 -0
  94. package/dist/assets/main-BV3KOtdA.css +1 -0
  95. package/dist/assets/main-CDKJj0sH.js +226 -0
  96. package/dist/assets/main-LC-PSNVM.js +2 -0
  97. package/dist/assets/miniChat-CQUiG_cr.js +2 -0
  98. package/dist/assets/modelPrefsAutoSave-Dm799vzR.js +6986 -0
  99. package/dist/assets/pl-DQJ7LSzj.js +15 -0
  100. package/dist/assets/pt-BR-OmjHUz9y.js +15 -0
  101. package/dist/assets/renderElectronMiniChatApp-CARbeW0G.js +2 -0
  102. package/dist/assets/uk-BNFxOlO4.js +15 -0
  103. package/dist/assets/vendor--DBfsbEis.css +1 -0
  104. package/dist/assets/vendor-.bun-B9l0ZNi2.js +4094 -0
  105. package/dist/assets/wasm-CG6Dc4jp.js +1 -0
  106. package/dist/assets/wasmSttWorker-Dtlxac_K.js +1 -0
  107. package/dist/assets/wasmSttWorker-oo7Dm_jy.js +1806 -0
  108. package/dist/assets/worker-CbT6TVo7.js +155 -0
  109. package/dist/assets/zh-CN-C6T-Ac7F.js +15 -0
  110. package/dist/favicon-16.png +0 -0
  111. package/dist/favicon-32.png +0 -0
  112. package/dist/favicon.png +0 -0
  113. package/dist/favicon.svg +528 -0
  114. package/dist/index.html +607 -0
  115. package/dist/logo-dark-192x192.png +0 -0
  116. package/dist/logo-dark-512x512.png +0 -0
  117. package/dist/logo-dark-512x512.svg +528 -0
  118. package/dist/logo-light-192x192.png +0 -0
  119. package/dist/logo-light-512x512.png +0 -0
  120. package/dist/logo-light-512x512.svg +528 -0
  121. package/dist/mini-chat.html +16 -0
  122. package/dist/pwa-192.png +0 -0
  123. package/dist/pwa-512.png +0 -0
  124. package/dist/pwa-maskable-192.png +0 -0
  125. package/dist/pwa-maskable-512.png +0 -0
  126. package/dist/site.webmanifest +21 -0
  127. package/dist/sw.js +1 -0
  128. package/package.json +118 -0
  129. package/public/apple-touch-icon-120x120.png +0 -0
  130. package/public/apple-touch-icon-152x152.png +0 -0
  131. package/public/apple-touch-icon-167x167.png +0 -0
  132. package/public/apple-touch-icon-180x180.png +0 -0
  133. package/public/apple-touch-icon.png +0 -0
  134. package/public/apple-touch-icon.svg +528 -0
  135. package/public/favicon-16.png +0 -0
  136. package/public/favicon-32.png +0 -0
  137. package/public/favicon.png +0 -0
  138. package/public/favicon.svg +528 -0
  139. package/public/logo-dark-192x192.png +0 -0
  140. package/public/logo-dark-512x512.png +0 -0
  141. package/public/logo-dark-512x512.svg +528 -0
  142. package/public/logo-light-192x192.png +0 -0
  143. package/public/logo-light-512x512.png +0 -0
  144. package/public/logo-light-512x512.svg +528 -0
  145. package/public/pwa-192.png +0 -0
  146. package/public/pwa-512.png +0 -0
  147. package/public/pwa-maskable-192.png +0 -0
  148. package/public/pwa-maskable-512.png +0 -0
  149. package/public/site.webmanifest +21 -0
  150. package/server/TERMINAL_WS_PROTOCOL.md +48 -0
  151. package/server/index.d.ts +39 -0
  152. package/server/index.js +1311 -0
  153. package/server/lib/cloudflare-tunnel.js +650 -0
  154. package/server/lib/event-stream/DOCUMENTATION.md +61 -0
  155. package/server/lib/event-stream/directory-ws-bridge.js +185 -0
  156. package/server/lib/event-stream/global-hub.js +158 -0
  157. package/server/lib/event-stream/global-hub.test.js +140 -0
  158. package/server/lib/event-stream/global-ws-bridge.js +206 -0
  159. package/server/lib/event-stream/index.js +25 -0
  160. package/server/lib/event-stream/protocol.js +131 -0
  161. package/server/lib/event-stream/protocol.test.js +182 -0
  162. package/server/lib/event-stream/runtime.js +180 -0
  163. package/server/lib/event-stream/runtime.test.js +512 -0
  164. package/server/lib/event-stream/upstream-reader.js +226 -0
  165. package/server/lib/event-stream/upstream-reader.test.js +276 -0
  166. package/server/lib/fs/DOCUMENTATION.md +36 -0
  167. package/server/lib/fs/routes.js +1040 -0
  168. package/server/lib/fs/search.js +238 -0
  169. package/server/lib/git/DOCUMENTATION.md +152 -0
  170. package/server/lib/git/credentials.js +74 -0
  171. package/server/lib/git/identity-storage.js +112 -0
  172. package/server/lib/git/index.js +6 -0
  173. package/server/lib/git/routes.js +972 -0
  174. package/server/lib/git/service.js +3432 -0
  175. package/server/lib/git/service.test.js +39 -0
  176. package/server/lib/github/DOCUMENTATION.md +171 -0
  177. package/server/lib/github/auth.js +307 -0
  178. package/server/lib/github/device-flow.js +50 -0
  179. package/server/lib/github/index.js +24 -0
  180. package/server/lib/github/octokit.js +10 -0
  181. package/server/lib/github/pr-status.js +519 -0
  182. package/server/lib/github/repo/fork-detection.js +102 -0
  183. package/server/lib/github/repo/index.js +55 -0
  184. package/server/lib/github/routes.js +1560 -0
  185. package/server/lib/magic-prompts/routes.js +63 -0
  186. package/server/lib/magic-prompts/runtime.js +119 -0
  187. package/server/lib/notifications/DOCUMENTATION.md +122 -0
  188. package/server/lib/notifications/emitter-runtime.js +102 -0
  189. package/server/lib/notifications/index.js +4 -0
  190. package/server/lib/notifications/message.js +52 -0
  191. package/server/lib/notifications/message.test.js +34 -0
  192. package/server/lib/notifications/push-runtime.js +304 -0
  193. package/server/lib/notifications/routes.js +315 -0
  194. package/server/lib/notifications/runtime.js +566 -0
  195. package/server/lib/notifications/template-runtime.js +349 -0
  196. package/server/lib/notifications/template-runtime.test.js +26 -0
  197. package/server/lib/opencode/DOCUMENTATION.md +362 -0
  198. package/server/lib/opencode/agents.js +634 -0
  199. package/server/lib/opencode/auth-state-runtime.js +88 -0
  200. package/server/lib/opencode/auth.js +83 -0
  201. package/server/lib/opencode/bootstrap-runtime.js +131 -0
  202. package/server/lib/opencode/cli-entry-runtime.js +43 -0
  203. package/server/lib/opencode/cli-options.js +128 -0
  204. package/server/lib/opencode/commands.js +339 -0
  205. package/server/lib/opencode/config-entity-routes.js +370 -0
  206. package/server/lib/opencode/core-routes.js +500 -0
  207. package/server/lib/opencode/core-routes.test.js +26 -0
  208. package/server/lib/opencode/env-config.js +74 -0
  209. package/server/lib/opencode/env-keys.js +68 -0
  210. package/server/lib/opencode/env-runtime.js +1162 -0
  211. package/server/lib/opencode/env-runtime.test.js +116 -0
  212. package/server/lib/opencode/feature-routes-runtime.js +244 -0
  213. package/server/lib/opencode/hmr-state-runtime.js +85 -0
  214. package/server/lib/opencode/index.js +66 -0
  215. package/server/lib/opencode/lifecycle.js +1019 -0
  216. package/server/lib/opencode/lifecycle.test.js +240 -0
  217. package/server/lib/opencode/mcp.js +278 -0
  218. package/server/lib/opencode/network-runtime.js +104 -0
  219. package/server/lib/opencode/network-runtime.test.js +37 -0
  220. package/server/lib/opencode/opencode-resolution-runtime.js +71 -0
  221. package/server/lib/opencode/path-utils.js +100 -0
  222. package/server/lib/opencode/path-utils.test.js +71 -0
  223. package/server/lib/opencode/project-directory-runtime.js +124 -0
  224. package/server/lib/opencode/project-icon-routes.js +399 -0
  225. package/server/lib/opencode/project-icon-routes.test.js +107 -0
  226. package/server/lib/opencode/providers.js +96 -0
  227. package/server/lib/opencode/proxy.js +445 -0
  228. package/server/lib/opencode/pwa-manifest-routes.js +257 -0
  229. package/server/lib/opencode/pwa-manifest-routes.test.js +133 -0
  230. package/server/lib/opencode/routes.js +541 -0
  231. package/server/lib/opencode/server-startup-runtime.js +156 -0
  232. package/server/lib/opencode/server-utils-runtime.js +168 -0
  233. package/server/lib/opencode/server-utils-runtime.test.js +135 -0
  234. package/server/lib/opencode/session-runtime.js +356 -0
  235. package/server/lib/opencode/session-runtime.test.js +151 -0
  236. package/server/lib/opencode/settings-helpers.js +770 -0
  237. package/server/lib/opencode/settings-helpers.test.js +109 -0
  238. package/server/lib/opencode/settings-normalization-runtime.js +428 -0
  239. package/server/lib/opencode/settings-runtime.js +826 -0
  240. package/server/lib/opencode/settings-runtime.test.js +85 -0
  241. package/server/lib/opencode/shared.js +615 -0
  242. package/server/lib/opencode/shutdown-runtime.js +139 -0
  243. package/server/lib/opencode/shutdown-runtime.test.js +58 -0
  244. package/server/lib/opencode/skill-routes.js +701 -0
  245. package/server/lib/opencode/skills.js +548 -0
  246. package/server/lib/opencode/startup-pipeline-runtime.js +130 -0
  247. package/server/lib/opencode/static-routes-runtime.js +65 -0
  248. package/server/lib/opencode/theme-runtime.js +167 -0
  249. package/server/lib/opencode/tunnel-auth.js +591 -0
  250. package/server/lib/opencode/tunnel-wiring-runtime.js +94 -0
  251. package/server/lib/opencode/vinci-routes.js +76 -0
  252. package/server/lib/opencode/watcher.js +115 -0
  253. package/server/lib/opencode/watcher.test.js +239 -0
  254. package/server/lib/preview/proxy-runtime.js +1333 -0
  255. package/server/lib/preview/proxy-runtime.test.js +144 -0
  256. package/server/lib/projects/project-config.js +567 -0
  257. package/server/lib/projects/project-config.test.js +175 -0
  258. package/server/lib/projects/project-id.js +13 -0
  259. package/server/lib/quota/DOCUMENTATION.md +58 -0
  260. package/server/lib/quota/index.js +25 -0
  261. package/server/lib/quota/providers/claude.js +107 -0
  262. package/server/lib/quota/providers/codex.js +113 -0
  263. package/server/lib/quota/providers/copilot.js +165 -0
  264. package/server/lib/quota/providers/google/api.js +92 -0
  265. package/server/lib/quota/providers/google/auth.js +108 -0
  266. package/server/lib/quota/providers/google/index.js +124 -0
  267. package/server/lib/quota/providers/google/transforms.js +109 -0
  268. package/server/lib/quota/providers/index.js +168 -0
  269. package/server/lib/quota/providers/interface.js +55 -0
  270. package/server/lib/quota/providers/kimi.js +108 -0
  271. package/server/lib/quota/providers/minimax-cn-coding-plan.js +140 -0
  272. package/server/lib/quota/providers/minimax-coding-plan.js +139 -0
  273. package/server/lib/quota/providers/nanogpt.js +124 -0
  274. package/server/lib/quota/providers/ollama-cloud.js +112 -0
  275. package/server/lib/quota/providers/openai.js +91 -0
  276. package/server/lib/quota/providers/openrouter.js +92 -0
  277. package/server/lib/quota/providers/zai.js +91 -0
  278. package/server/lib/quota/providers/zhipuai-coding-plan.js +133 -0
  279. package/server/lib/quota/providers/zhipuai.js +114 -0
  280. package/server/lib/quota/routes.js +27 -0
  281. package/server/lib/quota/utils/auth.js +50 -0
  282. package/server/lib/quota/utils/formatters.js +85 -0
  283. package/server/lib/quota/utils/formatters.test.js +54 -0
  284. package/server/lib/quota/utils/index.js +10 -0
  285. package/server/lib/quota/utils/transformers.js +55 -0
  286. package/server/lib/scheduled-tasks/DOCUMENTATION.md +44 -0
  287. package/server/lib/scheduled-tasks/routes.js +235 -0
  288. package/server/lib/scheduled-tasks/runtime.js +773 -0
  289. package/server/lib/scheduled-tasks/runtime.test.js +100 -0
  290. package/server/lib/security/request-security.js +115 -0
  291. package/server/lib/session-folders/routes.js +63 -0
  292. package/server/lib/session-folders/routes.test.js +102 -0
  293. package/server/lib/skills-catalog/DOCUMENTATION.md +178 -0
  294. package/server/lib/skills-catalog/cache.js +29 -0
  295. package/server/lib/skills-catalog/clawdhub/api.js +158 -0
  296. package/server/lib/skills-catalog/clawdhub/index.js +30 -0
  297. package/server/lib/skills-catalog/clawdhub/install.js +238 -0
  298. package/server/lib/skills-catalog/clawdhub/scan.js +113 -0
  299. package/server/lib/skills-catalog/curated-sources.js +21 -0
  300. package/server/lib/skills-catalog/git.js +77 -0
  301. package/server/lib/skills-catalog/index.js +42 -0
  302. package/server/lib/skills-catalog/install.js +294 -0
  303. package/server/lib/skills-catalog/scan.js +221 -0
  304. package/server/lib/skills-catalog/source.js +87 -0
  305. package/server/lib/terminal/DOCUMENTATION.md +76 -0
  306. package/server/lib/terminal/index.js +31 -0
  307. package/server/lib/terminal/output-replay-buffer.js +78 -0
  308. package/server/lib/terminal/output-replay-buffer.test.js +75 -0
  309. package/server/lib/terminal/runtime.js +850 -0
  310. package/server/lib/terminal/runtime.test.js +96 -0
  311. package/server/lib/terminal/terminal-ws-protocol.js +68 -0
  312. package/server/lib/terminal/terminal-ws-protocol.test.js +145 -0
  313. package/server/lib/text/DOCUMENTATION.md +35 -0
  314. package/server/lib/text/summarization.js +138 -0
  315. package/server/lib/text/summarization.test.js +34 -0
  316. package/server/lib/tts/DOCUMENTATION.md +146 -0
  317. package/server/lib/tts/base-url.js +62 -0
  318. package/server/lib/tts/capability-runtime.js +31 -0
  319. package/server/lib/tts/index.js +19 -0
  320. package/server/lib/tts/routes.js +261 -0
  321. package/server/lib/tts/routes.test.js +53 -0
  322. package/server/lib/tts/service.js +178 -0
  323. package/server/lib/tts/stt.js +75 -0
  324. package/server/lib/tunnels/DOCUMENTATION.md +18 -0
  325. package/server/lib/tunnels/index.js +166 -0
  326. package/server/lib/tunnels/managed-config.js +201 -0
  327. package/server/lib/tunnels/providers/cloudflare.js +260 -0
  328. package/server/lib/tunnels/registry.js +51 -0
  329. package/server/lib/tunnels/routes.js +605 -0
  330. package/server/lib/tunnels/types.js +219 -0
  331. package/server/lib/ui-auth/DOCUMENTATION.md +38 -0
  332. package/server/lib/ui-auth/ui-auth.js +673 -0
  333. package/server/lib/ui-auth/ui-passkeys.js +545 -0
  334. package/server/opencode-proxy.test.js +151 -0
  335. package/server/proxy-headers.js +61 -0
  336. package/server/proxy-headers.test.js +58 -0
  337. package/server/sse-routes.test.js +152 -0
@@ -0,0 +1,156 @@
1
+ export const createServerStartupRuntime = (dependencies) => {
2
+ const {
3
+ process,
4
+ crypto,
5
+ server,
6
+ normalizeTunnelBootstrapTtlMs,
7
+ readSettingsFromDiskMigrated,
8
+ tunnelAuthController,
9
+ startTunnelWithNormalizedRequest,
10
+ gracefulShutdown,
11
+ getSignalsAttached,
12
+ setSignalsAttached,
13
+ syncToHmrState,
14
+ TUNNEL_MODE_QUICK,
15
+ TUNNEL_MODE_MANAGED_LOCAL,
16
+ TUNNEL_MODE_MANAGED_REMOTE,
17
+ } = dependencies;
18
+
19
+ const resolveBindHost = (host) =>
20
+ host
21
+ || (typeof process.env.VINCI_HOST === 'string' && process.env.VINCI_HOST.trim().length > 0
22
+ ? process.env.VINCI_HOST.trim()
23
+ : '127.0.0.1');
24
+
25
+ const startListeningAndMaybeTunnel = async ({
26
+ port,
27
+ bindHost,
28
+ startupTunnelRequest,
29
+ onTunnelReady,
30
+ }) => {
31
+ let activePort = port;
32
+
33
+ await new Promise((resolve, reject) => {
34
+ const onError = (error) => {
35
+ server.off('error', onError);
36
+ reject(error);
37
+ };
38
+ server.once('error', onError);
39
+ const onListening = async () => {
40
+ server.off('error', onError);
41
+ try {
42
+ const addressInfo = server.address();
43
+ activePort = typeof addressInfo === 'object' && addressInfo ? addressInfo.port : port;
44
+
45
+ if (typeof process.send === 'function') {
46
+ if (!process.connected) {
47
+ throw new Error('Vinci startup IPC channel disconnected before ready notification');
48
+ }
49
+
50
+ await new Promise((resolveReadyNotification, rejectReadyNotification) => {
51
+ try {
52
+ process.send({ type: 'vinci:ready', port: activePort }, (error) => {
53
+ if (error) {
54
+ rejectReadyNotification(error);
55
+ return;
56
+ }
57
+ resolveReadyNotification();
58
+ });
59
+ } catch (error) {
60
+ rejectReadyNotification(error);
61
+ }
62
+ });
63
+ }
64
+
65
+ const displayHost = (bindHost === '0.0.0.0' || bindHost === '::' || bindHost === '[::]')
66
+ ? 'localhost'
67
+ : (bindHost.includes(':') ? `[${bindHost}]` : bindHost);
68
+ console.log(`Vinci server listening on ${bindHost}:${activePort}`);
69
+ console.log(`Health check: http://${displayHost}:${activePort}/health`);
70
+ console.log(`Web interface: http://${displayHost}:${activePort}`);
71
+
72
+ if (startupTunnelRequest) {
73
+ const startupModeLabel = startupTunnelRequest.mode === TUNNEL_MODE_QUICK
74
+ ? 'Quick Tunnel'
75
+ : (startupTunnelRequest.mode === TUNNEL_MODE_MANAGED_LOCAL
76
+ ? 'Managed Local Tunnel'
77
+ : (startupTunnelRequest.mode === TUNNEL_MODE_MANAGED_REMOTE ? 'Managed Remote Tunnel' : 'Tunnel'));
78
+ console.log(`\nInitializing ${startupModeLabel} for provider '${startupTunnelRequest.provider}'...`);
79
+ try {
80
+ const { publicUrl, mode } = await startTunnelWithNormalizedRequest({
81
+ provider: startupTunnelRequest.provider,
82
+ mode: startupTunnelRequest.mode,
83
+ intent: startupTunnelRequest.intent,
84
+ hostname: startupTunnelRequest.hostname,
85
+ token: startupTunnelRequest.token,
86
+ configPath: startupTunnelRequest.configPath,
87
+ selectedPresetId: '',
88
+ selectedPresetName: '',
89
+ });
90
+ if (publicUrl) {
91
+ tunnelAuthController.setActiveTunnel({
92
+ tunnelId: crypto.randomUUID(),
93
+ publicUrl,
94
+ mode,
95
+ });
96
+ const settings = await readSettingsFromDiskMigrated();
97
+ const bootstrapTtlMs = settings?.tunnelBootstrapTtlMs === null
98
+ ? null
99
+ : normalizeTunnelBootstrapTtlMs(settings?.tunnelBootstrapTtlMs);
100
+ const bootstrapToken = tunnelAuthController.issueBootstrapToken({ ttlMs: bootstrapTtlMs });
101
+ const connectUrl = `${publicUrl.replace(/\/$/, '')}/connect?t=${encodeURIComponent(bootstrapToken.token)}`;
102
+ if (onTunnelReady) {
103
+ onTunnelReady(publicUrl, connectUrl);
104
+ } else {
105
+ console.log(`\n🌐 Tunnel URL: ${connectUrl}`);
106
+ console.log('🔑 One-time connect link (expires after first use)\n');
107
+ }
108
+ } else if (onTunnelReady) {
109
+ onTunnelReady(publicUrl, null);
110
+ }
111
+ } catch (error) {
112
+ console.error(`Failed to start tunnel: ${error.message}`);
113
+ console.log('Continuing without tunnel...');
114
+ }
115
+ }
116
+
117
+ resolve();
118
+ } catch (error) {
119
+ reject(error);
120
+ }
121
+ };
122
+
123
+ server.listen(port, bindHost, onListening);
124
+ });
125
+
126
+ return { activePort };
127
+ };
128
+
129
+ const attachProcessHandlers = ({ attachSignals }) => {
130
+ if (attachSignals && !getSignalsAttached()) {
131
+ const handleSignal = async () => {
132
+ await gracefulShutdown();
133
+ };
134
+ process.on('SIGTERM', handleSignal);
135
+ process.on('SIGINT', handleSignal);
136
+ process.on('SIGQUIT', handleSignal);
137
+ setSignalsAttached(true);
138
+ syncToHmrState();
139
+ }
140
+
141
+ process.on('unhandledRejection', (reason, promise) => {
142
+ console.error('Unhandled Rejection at:', promise, 'reason:', reason);
143
+ });
144
+
145
+ process.on('uncaughtException', (error) => {
146
+ console.error('Uncaught Exception:', error);
147
+ gracefulShutdown();
148
+ });
149
+ };
150
+
151
+ return {
152
+ resolveBindHost,
153
+ startListeningAndMaybeTunnel,
154
+ attachProcessHandlers,
155
+ };
156
+ };
@@ -0,0 +1,168 @@
1
+ import { registerOpenCodeProxy } from './proxy.js';
2
+ import { pathLooksUserConfigured, mergePathValues } from './path-utils.js';
3
+
4
+ export const createServerUtilsRuntime = (dependencies) => {
5
+ const {
6
+ fs,
7
+ os,
8
+ path,
9
+ process,
10
+ openCodeReadyGraceMs,
11
+ longRequestTimeoutMs,
12
+ getRuntime,
13
+ getOpenCodeAuthHeaders,
14
+ buildOpenCodeUrl,
15
+ ensureOpenCodeApiPrefix,
16
+ getUiNotificationClients,
17
+ getOpenCodePort,
18
+ setOpenCodePortState,
19
+ syncToHmrState,
20
+ markOpenCodeNotReady,
21
+ setOpenCodeNotReadySince,
22
+ clearLastOpenCodeError,
23
+ getLoginShellPath,
24
+ } = dependencies;
25
+
26
+ const setOpenCodePort = (port) => {
27
+ if (!Number.isFinite(port) || port <= 0) {
28
+ return;
29
+ }
30
+
31
+ const numericPort = Math.trunc(port);
32
+ const currentPort = getOpenCodePort();
33
+ const portChanged = currentPort !== numericPort;
34
+
35
+ if (portChanged || currentPort === null) {
36
+ setOpenCodePortState(numericPort);
37
+ syncToHmrState();
38
+ console.log(`Detected OpenCode port: ${numericPort}`);
39
+
40
+ if (portChanged) {
41
+ markOpenCodeNotReady();
42
+ }
43
+ setOpenCodeNotReadySince(Date.now());
44
+ }
45
+
46
+ clearLastOpenCodeError();
47
+ };
48
+
49
+ const waitForOpenCodePort = async (timeoutMs = 15000) => {
50
+ if (getOpenCodePort() !== null) {
51
+ return getOpenCodePort();
52
+ }
53
+
54
+ const deadline = Date.now() + timeoutMs;
55
+ while (Date.now() < deadline) {
56
+ await new Promise((resolve) => setTimeout(resolve, 50));
57
+ if (getOpenCodePort() !== null) {
58
+ return getOpenCodePort();
59
+ }
60
+ }
61
+
62
+ throw new Error('Timed out waiting for OpenCode port');
63
+ };
64
+
65
+ const buildAugmentedPath = () => {
66
+ const currentPath = process.env.PATH || '';
67
+ const loginShellPath = getLoginShellPath();
68
+ const home = os.homedir();
69
+ const currentPathLooksUserConfigured = pathLooksUserConfigured(currentPath, home, path.delimiter);
70
+ const primaryPath = currentPathLooksUserConfigured ? currentPath : loginShellPath;
71
+ const fallbackPath = currentPathLooksUserConfigured ? loginShellPath : currentPath;
72
+
73
+ return mergePathValues(primaryPath, fallbackPath, path.delimiter);
74
+ };
75
+
76
+ const buildManagedOpenCodePath = () => {
77
+ const currentPath = process.env.PATH || '';
78
+ const loginShellPath = getLoginShellPath();
79
+
80
+ return mergePathValues(loginShellPath || '', currentPath, path.delimiter);
81
+ };
82
+
83
+ const parseSseDataPayload = (block) => {
84
+ if (!block || typeof block !== 'string') {
85
+ return null;
86
+ }
87
+ const dataLines = block
88
+ .split('\n')
89
+ .filter((line) => line.startsWith('data:'))
90
+ .map((line) => line.slice(5).replace(/^\s/, ''));
91
+
92
+ if (dataLines.length === 0) {
93
+ return null;
94
+ }
95
+
96
+ const payloadText = dataLines.join('\n').trim();
97
+ if (!payloadText) {
98
+ return null;
99
+ }
100
+
101
+ try {
102
+ const parsed = JSON.parse(payloadText);
103
+ if (
104
+ parsed &&
105
+ typeof parsed === 'object' &&
106
+ typeof parsed.payload === 'object' &&
107
+ parsed.payload !== null
108
+ ) {
109
+ return parsed.payload;
110
+ }
111
+ return parsed;
112
+ } catch {
113
+ return null;
114
+ }
115
+ };
116
+
117
+ const fetchArraySnapshot = async (route, invalidMessage) => {
118
+ if (!getOpenCodePort()) {
119
+ throw new Error('OpenCode port is not available');
120
+ }
121
+
122
+ const response = await fetch(buildOpenCodeUrl(route), {
123
+ method: 'GET',
124
+ headers: { Accept: 'application/json', ...getOpenCodeAuthHeaders() },
125
+ });
126
+
127
+ if (!response.ok) {
128
+ throw new Error(`Failed to fetch ${invalidMessage} (status ${response.status})`);
129
+ }
130
+
131
+ const payload = await response.json().catch(() => null);
132
+ if (!Array.isArray(payload)) {
133
+ throw new Error(`Invalid ${invalidMessage} payload from OpenCode`);
134
+ }
135
+ return payload;
136
+ };
137
+
138
+ const fetchAgentsSnapshot = () => fetchArraySnapshot('/agent', 'agents snapshot');
139
+ const fetchProvidersSnapshot = () => fetchArraySnapshot('/provider', 'providers snapshot');
140
+ const fetchModelsSnapshot = () => fetchArraySnapshot('/model', 'models snapshot');
141
+
142
+ const setupProxy = (app) => {
143
+ registerOpenCodeProxy(app, {
144
+ fs,
145
+ os,
146
+ path,
147
+ OPEN_CODE_READY_GRACE_MS: openCodeReadyGraceMs,
148
+ LONG_REQUEST_TIMEOUT_MS: longRequestTimeoutMs,
149
+ getRuntime,
150
+ getOpenCodeAuthHeaders,
151
+ buildOpenCodeUrl,
152
+ ensureOpenCodeApiPrefix,
153
+ getUiNotificationClients,
154
+ });
155
+ };
156
+
157
+ return {
158
+ setOpenCodePort,
159
+ waitForOpenCodePort,
160
+ buildAugmentedPath,
161
+ buildManagedOpenCodePath,
162
+ parseSseDataPayload,
163
+ fetchAgentsSnapshot,
164
+ fetchProvidersSnapshot,
165
+ fetchModelsSnapshot,
166
+ setupProxy,
167
+ };
168
+ };
@@ -0,0 +1,135 @@
1
+ import os from 'node:os';
2
+ import path from 'node:path';
3
+ import { afterEach, describe, expect, it } from 'vitest';
4
+
5
+ import { createServerUtilsRuntime } from './server-utils-runtime.js';
6
+
7
+ const originalPath = process.env.PATH;
8
+
9
+ afterEach(() => {
10
+ if (originalPath === undefined) {
11
+ delete process.env.PATH;
12
+ return;
13
+ }
14
+
15
+ process.env.PATH = originalPath;
16
+ });
17
+
18
+ const createRuntime = (loginShellPath) => createServerUtilsRuntime({
19
+ fs: {},
20
+ os,
21
+ path,
22
+ process,
23
+ openCodeReadyGraceMs: 0,
24
+ longRequestTimeoutMs: 0,
25
+ getRuntime: () => ({}),
26
+ getOpenCodeAuthHeaders: () => ({}),
27
+ buildOpenCodeUrl: (route) => route,
28
+ ensureOpenCodeApiPrefix: () => {},
29
+ getUiNotificationClients: () => new Set(),
30
+ getOpenCodePort: () => null,
31
+ setOpenCodePortState: () => {},
32
+ syncToHmrState: () => {},
33
+ markOpenCodeNotReady: () => {},
34
+ setOpenCodeNotReadySince: () => {},
35
+ clearLastOpenCodeError: () => {},
36
+ getLoginShellPath: () => loginShellPath,
37
+ });
38
+
39
+ describe('server utils runtime', () => {
40
+ it('prefers shell PATH for managed OpenCode before appending process-only entries', () => {
41
+ const home = os.homedir();
42
+ const currentPath = [
43
+ path.join(home, '.opencode', 'bin'),
44
+ path.join(home, '.bun', 'bin'),
45
+ path.join(home, 'Library', 'pnpm'),
46
+ '/opt/homebrew/bin',
47
+ '/usr/bin',
48
+ ].join(path.delimiter);
49
+ process.env.PATH = currentPath;
50
+
51
+ const runtime = createRuntime([
52
+ path.join(home, '.opencode', 'bin'),
53
+ path.join(home, '.bun', 'bin'),
54
+ '/opt/homebrew/bin',
55
+ '/usr/bin',
56
+ path.join(home, '.cargo', 'bin'),
57
+ ].join(path.delimiter));
58
+
59
+ expect(runtime.buildManagedOpenCodePath()).toBe([
60
+ path.join(home, '.opencode', 'bin'),
61
+ path.join(home, '.bun', 'bin'),
62
+ '/opt/homebrew/bin',
63
+ '/usr/bin',
64
+ path.join(home, '.cargo', 'bin'),
65
+ path.join(home, 'Library', 'pnpm'),
66
+ ].join(path.delimiter));
67
+ });
68
+
69
+ it('uses login shell PATH for managed OpenCode when process PATH is minimal', () => {
70
+ const home = os.homedir();
71
+ const loginShellPath = [
72
+ path.join(home, '.opencode', 'bin'),
73
+ path.join(home, '.bun', 'bin'),
74
+ '/opt/homebrew/bin',
75
+ '/usr/bin',
76
+ ].join(path.delimiter);
77
+ process.env.PATH = ['/usr/local/bin', '/usr/bin', '/bin'].join(path.delimiter);
78
+
79
+ const runtime = createRuntime(loginShellPath);
80
+
81
+ // Should prefer login shell PATH but merge in any process entries not already present.
82
+ expect(runtime.buildManagedOpenCodePath()).toBe([
83
+ path.join(home, '.opencode', 'bin'),
84
+ path.join(home, '.bun', 'bin'),
85
+ '/opt/homebrew/bin',
86
+ '/usr/bin',
87
+ '/usr/local/bin',
88
+ '/bin',
89
+ ].join(path.delimiter));
90
+ });
91
+
92
+ it('preserves user-configured process PATH order before appending shell-only entries', () => {
93
+ const home = os.homedir();
94
+ process.env.PATH = [
95
+ path.join(home, '.bun', 'bin'),
96
+ path.join(home, 'Library', 'pnpm'),
97
+ '/opt/homebrew/bin',
98
+ '/usr/bin',
99
+ ].join(path.delimiter);
100
+
101
+ const runtime = createRuntime([
102
+ path.join(home, '.bun', 'bin'),
103
+ '/opt/homebrew/bin',
104
+ path.join(home, '.cargo', 'bin'),
105
+ '/usr/bin',
106
+ ].join(path.delimiter));
107
+
108
+ expect(runtime.buildAugmentedPath()).toBe([
109
+ path.join(home, '.bun', 'bin'),
110
+ path.join(home, 'Library', 'pnpm'),
111
+ '/opt/homebrew/bin',
112
+ '/usr/bin',
113
+ path.join(home, '.cargo', 'bin'),
114
+ ].join(path.delimiter));
115
+ });
116
+
117
+ it('prefers login shell PATH when current process PATH is minimal', () => {
118
+ const home = os.homedir();
119
+ process.env.PATH = ['/usr/local/bin', '/usr/bin', '/bin'].join(path.delimiter);
120
+
121
+ const runtime = createRuntime([
122
+ path.join(home, '.bun', 'bin'),
123
+ '/opt/homebrew/bin',
124
+ '/usr/bin',
125
+ ].join(path.delimiter));
126
+
127
+ expect(runtime.buildAugmentedPath()).toBe([
128
+ path.join(home, '.bun', 'bin'),
129
+ '/opt/homebrew/bin',
130
+ '/usr/bin',
131
+ '/usr/local/bin',
132
+ '/bin',
133
+ ].join(path.delimiter));
134
+ });
135
+ });