@walkhi/code-relax 0.1.0-beta.30 → 0.1.0-beta.31

package/dist/bin/self-relay-server.mjs

@@ -1,66 +1,66 @@
-#!/usr/bin/env node
-import fs from 'node:fs';
-import serviceEndpoints from '../shared/service-endpoints.cjs';
-import { deviceStore, validId } from '../src/self-relay/device-store.mjs';
-import { openRelayMysql } from '../src/self-relay/mysql-state.mjs';
-import { startSelfRelay } from '../src/self-relay/server.mjs';
-import { updateDebugAllowlist } from '../src/self-relay/debug-allowlist.mjs';
-
-const keyFile = process.env.RELAY_HOST_KEY_FILE;
-if (!keyFile) throw new Error('RELAY_HOST_KEY_FILE is required');
-const hostKey = fs.readFileSync(keyFile, 'utf8').trim();
-const port = Number(process.env.RELAY_PORT || 45850);
-if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new Error('Invalid RELAY_PORT');
-const stateFile = process.env.RELAY_STATE_FILE;
-const mysqlConfigFile = process.env.RELAY_MYSQL_CONFIG_FILE;
-const accountConfigFile = process.env.RELAY_ACCOUNT_CONFIG_FILE;
-const longPairingFile = process.env.RELAY_LONG_PAIRING_FILE || '/var/lib/codex-relay/long-pairing.json';
-if (!stateFile && !mysqlConfigFile) throw new Error('RELAY_STATE_FILE or RELAY_MYSQL_CONFIG_FILE is required');
-const debugAllowlistFile = process.env.RELAY_DEBUG_ALLOWLIST_FILE || '/etc/codex-relay/debug-allowlist.json';
-const adminStateFile = process.env.RELAY_ADMIN_STATE_FILE || '/var/lib/codex-relay/admin.json';
-const maxRelaySessions = Number(process.env.RELAY_MAX_RELAY_SESSIONS || 8);
-if (!Number.isSafeInteger(maxRelaySessions) || maxRelaySessions < 1 || maxRelaySessions > 256) throw new Error('Invalid RELAY_MAX_RELAY_SESSIONS');
-const debugCommand = process.argv.find(value => ['--debug-list', '--debug-allow', '--debug-deny'].includes(value));
-if (debugCommand) {
-  const database = mysqlConfigFile ? await openRelayMysql(mysqlConfigFile, maxRelaySessions) : null;
-  const records = (database?.devices || deviceStore(stateFile)).entries();
-  if (debugCommand === '--debug-list') {
-    console.log(JSON.stringify(records.map(record => ({
-      deviceId: record.id, status: record.status, clientCount: record.clients.length,
-    })), null, 2));
-  } else {
-    const index = process.argv.indexOf(debugCommand), deviceId = process.argv[index + 1];
-    if (!validId(deviceId)) throw new Error('Invalid device ID');
-    const record = records.find(record => record.id === deviceId && record.status === 'active');
-    if (!record && debugCommand === '--debug-allow') throw new Error('Active paired device not found');
-    updateDebugAllowlist(debugAllowlistFile, deviceId, debugCommand === '--debug-allow');
-    console.log('Debug allowlist updated; restart relay to apply.');
-  }
-  if (database) await database.close();
-  process.exit(0);
-}
-if (process.argv.includes('--init-state')) { if (mysqlConfigFile) throw new Error('Use migrations for MySQL mode'); deviceStore(stateFile, { initialize: true }); console.log('Device store initialized'); process.exit(0); }
-const revokeIndex = process.argv.indexOf('--revoke-host');
-if (revokeIndex >= 0) {
-  // Run only with the service stopped: this is an offline administrator operation.
-  if (!process.argv.includes('--offline')) throw new Error('Stop the relay service and supply --offline');
-  const id = process.argv[revokeIndex + 1];
-  if (!validId(id)) throw new Error('Invalid device ID');
-  const database = mysqlConfigFile ? await openRelayMysql(mysqlConfigFile, maxRelaySessions) : null;
-  const store = database?.devices || deviceStore(stateFile), record = store.entries().find(item => item.id === id);
-  if (!record) throw new Error('Device not found');
-  await store.save({ ...record, status: 'revoked', clients: [], revision: record.revision + 1, updatedAt: new Date().toISOString() });
-  if (database) await database.close();
-  console.log('Computer and phone authorization revoked'); process.exit(0);
-}
-const relay = await startSelfRelay({ port, hostKey, stateFile, mysqlConfigFile, accountConfigFile, debugAllowlistFile, adminStateFile, maxRelaySessions,
-  longPairingFile,
-  androidReleaseConfigFile: process.env.RELAY_ANDROID_RELEASE_CONFIG_FILE,
-  androidReleaseCredentialFile: process.env.CREDENTIALS_DIRECTORY ? `${process.env.CREDENTIALS_DIRECTORY}/tencent-monitor.json` : undefined,
-  usageDiagnosticKeyFile: process.env.RELAY_USAGE_DIAGNOSTIC_KEY_FILE,
-  publicRelayUrl: process.env.RELAY_PUBLIC_URL || serviceEndpoints.relayUrl, appDownloadUrl: process.env.RELAY_APP_DOWNLOAD_URL || serviceEndpoints.installUrl,
-  log: entry => console.log(JSON.stringify({ time: new Date().toISOString(), ...entry })) });
-console.log(JSON.stringify({ service: 'codex-self-relay', listen: relay.url, maxConnections: 128, maxRelaySessions,
-  maxFrameMiB: 8, encryption: 'TLS must be supplied by reverse proxy; no end-to-end encryption' }));
-await new Promise(resolve => { process.once('SIGTERM', resolve); process.once('SIGINT', resolve); });
-await relay.close();
+#!/usr/bin/env node
+import fs from 'node:fs';
+import serviceEndpoints from '../shared/service-endpoints.cjs';
+import { deviceStore, validId } from '../src/self-relay/device-store.mjs';
+import { openRelayMysql } from '../src/self-relay/mysql-state.mjs';
+import { startSelfRelay } from '../src/self-relay/server.mjs';
+import { updateDebugAllowlist } from '../src/self-relay/debug-allowlist.mjs';
+
+const keyFile = process.env.RELAY_HOST_KEY_FILE;
+if (!keyFile) throw new Error('RELAY_HOST_KEY_FILE is required');
+const hostKey = fs.readFileSync(keyFile, 'utf8').trim();
+const port = Number(process.env.RELAY_PORT || 45850);
+if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new Error('Invalid RELAY_PORT');
+const stateFile = process.env.RELAY_STATE_FILE;
+const mysqlConfigFile = process.env.RELAY_MYSQL_CONFIG_FILE;
+const accountConfigFile = process.env.RELAY_ACCOUNT_CONFIG_FILE;
+const longPairingFile = process.env.RELAY_LONG_PAIRING_FILE || '/var/lib/codex-relay/long-pairing.json';
+if (!stateFile && !mysqlConfigFile) throw new Error('RELAY_STATE_FILE or RELAY_MYSQL_CONFIG_FILE is required');
+const debugAllowlistFile = process.env.RELAY_DEBUG_ALLOWLIST_FILE || '/etc/codex-relay/debug-allowlist.json';
+const adminStateFile = process.env.RELAY_ADMIN_STATE_FILE || '/var/lib/codex-relay/admin.json';
+const maxRelaySessions = Number(process.env.RELAY_MAX_RELAY_SESSIONS || 8);
+if (!Number.isSafeInteger(maxRelaySessions) || maxRelaySessions < 1 || maxRelaySessions > 256) throw new Error('Invalid RELAY_MAX_RELAY_SESSIONS');
+const debugCommand = process.argv.find(value => ['--debug-list', '--debug-allow', '--debug-deny'].includes(value));
+if (debugCommand) {
+  const database = mysqlConfigFile ? await openRelayMysql(mysqlConfigFile, maxRelaySessions) : null;
+  const records = (database?.devices || deviceStore(stateFile)).entries();
+  if (debugCommand === '--debug-list') {
+    console.log(JSON.stringify(records.map(record => ({
+      deviceId: record.id, status: record.status, clientCount: record.clients.length,
+    })), null, 2));
+  } else {
+    const index = process.argv.indexOf(debugCommand), deviceId = process.argv[index + 1];
+    if (!validId(deviceId)) throw new Error('Invalid device ID');
+    const record = records.find(record => record.id === deviceId && record.status === 'active');
+    if (!record && debugCommand === '--debug-allow') throw new Error('Active paired device not found');
+    updateDebugAllowlist(debugAllowlistFile, deviceId, debugCommand === '--debug-allow');
+    console.log('Debug allowlist updated; restart relay to apply.');
+  }
+  if (database) await database.close();
+  process.exit(0);
+}
+if (process.argv.includes('--init-state')) { if (mysqlConfigFile) throw new Error('Use migrations for MySQL mode'); deviceStore(stateFile, { initialize: true }); console.log('Device store initialized'); process.exit(0); }
+const revokeIndex = process.argv.indexOf('--revoke-host');
+if (revokeIndex >= 0) {
+  // Run only with the service stopped: this is an offline administrator operation.
+  if (!process.argv.includes('--offline')) throw new Error('Stop the relay service and supply --offline');
+  const id = process.argv[revokeIndex + 1];
+  if (!validId(id)) throw new Error('Invalid device ID');
+  const database = mysqlConfigFile ? await openRelayMysql(mysqlConfigFile, maxRelaySessions) : null;
+  const store = database?.devices || deviceStore(stateFile), record = store.entries().find(item => item.id === id);
+  if (!record) throw new Error('Device not found');
+  await store.save({ ...record, status: 'revoked', clients: [], revision: record.revision + 1, updatedAt: new Date().toISOString() });
+  if (database) await database.close();
+  console.log('Computer and phone authorization revoked'); process.exit(0);
+}
+const relay = await startSelfRelay({ port, hostKey, stateFile, mysqlConfigFile, accountConfigFile, debugAllowlistFile, adminStateFile, maxRelaySessions,
+  longPairingFile,
+  androidReleaseConfigFile: process.env.RELAY_ANDROID_RELEASE_CONFIG_FILE,
+  androidReleaseCredentialFile: process.env.CREDENTIALS_DIRECTORY ? `${process.env.CREDENTIALS_DIRECTORY}/tencent-monitor.json` : undefined,
+  usageDiagnosticKeyFile: process.env.RELAY_USAGE_DIAGNOSTIC_KEY_FILE,
+  publicRelayUrl: process.env.RELAY_PUBLIC_URL || serviceEndpoints.relayUrl, appDownloadUrl: process.env.RELAY_APP_DOWNLOAD_URL || serviceEndpoints.installUrl,
+  log: entry => console.log(JSON.stringify({ time: new Date().toISOString(), ...entry })) });
+console.log(JSON.stringify({ service: 'codex-self-relay', listen: relay.url, maxConnections: 128, maxRelaySessions,
+  maxFrameMiB: 8, encryption: 'TLS must be supplied by reverse proxy; no end-to-end encryption' }));
+await new Promise(resolve => { process.once('SIGTERM', resolve); process.once('SIGINT', resolve); });
+await relay.close();

package/dist/build-platform.json

@@ -1 +1 @@
-{"layout":"npm-platform-packages","version":"0.1.0-beta.30"}
+{"layout":"npm-platform-packages","version":"0.1.0-beta.31"}

package/dist/get-lan-networks.ps1

@@ -1,40 +1,40 @@
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-
-$profiles = @{}
-Get-NetConnectionProfile -ErrorAction SilentlyContinue | ForEach-Object {
-    $profiles[[int]$_.InterfaceIndex] = [string]$_.Name
-}
-
-$networks = [System.Net.NetworkInformation.NetworkInterface]::GetAllNetworkInterfaces() |
-    Where-Object {
-        $_.OperationalStatus -eq 'Up' -and
-        $_.NetworkInterfaceType -in @('Wireless80211', 'Ethernet') -and
-        $_.GetIPProperties().GatewayAddresses.Count -gt 0
-    } | ForEach-Object {
-        $adapter = $_
-        $properties = $adapter.GetIPProperties()
-        $interfaceIndex = $properties.GetIPv4Properties().Index
-        $networkType = if ($adapter.NetworkInterfaceType -eq 'Wireless80211') { 'wifi' } else { 'ethernet' }
-        $networkName = $profiles[$interfaceIndex]
-        if ($networkType -eq 'wifi') {
-            $wlan = (& netsh wlan show interfaces interface="$($adapter.Name)" 2>$null) -join "`n"
-            $ssid = [regex]::Match($wlan, '(?m)^\s*SSID\s*:\s*(.*?)\s*$')
-            if ($ssid.Success -and -not [string]::IsNullOrWhiteSpace($ssid.Groups[1].Value)) {
-                $networkName = $ssid.Groups[1].Value.Trim()
-            }
-        }
-        if ([string]::IsNullOrWhiteSpace($networkName)) { $networkName = $adapter.Name }
-        $properties.UnicastAddresses | Where-Object {
-            $_.Address.AddressFamily -eq 'InterNetwork' -and
-            $_.Address.IPAddressToString -match '^(192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[01])\.|100\.(6[4-9]|[7-9][0-9]|1[01][0-9]|12[0-7])\.)'
-        } | ForEach-Object {
-            [PSCustomObject]@{
-                address = $_.Address.IPAddressToString
-                networkType = $networkType
-                networkName = $networkName
-                interfaceName = [string]$adapter.Name
-            }
-        }
-    }
-
-ConvertTo-Json -InputObject @($networks) -Compress
+[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+
+$profiles = @{}
+Get-NetConnectionProfile -ErrorAction SilentlyContinue | ForEach-Object {
+    $profiles[[int]$_.InterfaceIndex] = [string]$_.Name
+}
+
+$networks = [System.Net.NetworkInformation.NetworkInterface]::GetAllNetworkInterfaces() |
+    Where-Object {
+        $_.OperationalStatus -eq 'Up' -and
+        $_.NetworkInterfaceType -in @('Wireless80211', 'Ethernet') -and
+        $_.GetIPProperties().GatewayAddresses.Count -gt 0
+    } | ForEach-Object {
+        $adapter = $_
+        $properties = $adapter.GetIPProperties()
+        $interfaceIndex = $properties.GetIPv4Properties().Index
+        $networkType = if ($adapter.NetworkInterfaceType -eq 'Wireless80211') { 'wifi' } else { 'ethernet' }
+        $networkName = $profiles[$interfaceIndex]
+        if ($networkType -eq 'wifi') {
+            $wlan = (& netsh wlan show interfaces interface="$($adapter.Name)" 2>$null) -join "`n"
+            $ssid = [regex]::Match($wlan, '(?m)^\s*SSID\s*:\s*(.*?)\s*$')
+            if ($ssid.Success -and -not [string]::IsNullOrWhiteSpace($ssid.Groups[1].Value)) {
+                $networkName = $ssid.Groups[1].Value.Trim()
+            }
+        }
+        if ([string]::IsNullOrWhiteSpace($networkName)) { $networkName = $adapter.Name }
+        $properties.UnicastAddresses | Where-Object {
+            $_.Address.AddressFamily -eq 'InterNetwork' -and
+            $_.Address.IPAddressToString -match '^(192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[01])\.|100\.(6[4-9]|[7-9][0-9]|1[01][0-9]|12[0-7])\.)'
+        } | ForEach-Object {
+            [PSCustomObject]@{
+                address = $_.Address.IPAddressToString
+                networkType = $networkType
+                networkName = $networkName
+                interfaceName = [string]$adapter.Name
+            }
+        }
+    }
+
+ConvertTo-Json -InputObject @($networks) -Compress

package/dist/get-shared-service-url.ps1

@@ -1,6 +1,6 @@
-# Detect the Desktop connection, not merely a listening standalone server.
-$connections = @(Get-NetTCPConnection -RemotePort 45839 -State Established -ErrorAction SilentlyContinue | Where-Object {
-    $_.RemoteAddress -eq '127.0.0.1' -and
-    (Get-Process -Id $_.OwningProcess -ErrorAction SilentlyContinue).ProcessName -eq 'ChatGPT'
-})
-if ($connections.Count) { 'ws://127.0.0.1:45839' }
+# Detect the Desktop connection, not merely a listening standalone server.
+$connections = @(Get-NetTCPConnection -RemotePort 45839 -State Established -ErrorAction SilentlyContinue | Where-Object {
+    $_.RemoteAddress -eq '127.0.0.1' -and
+    (Get-Process -Id $_.OwningProcess -ErrorAction SilentlyContinue).ProcessName -eq 'ChatGPT'
+})
+if ($connections.Count) { 'ws://127.0.0.1:45839' }