@walkhi/code-relax 0.1.0-beta.50 → 0.1.0-beta.51

package/dist/shared/server-requests.cjs

@@ -1,311 +1,311 @@
-(function (root, factory) {
-  if (typeof module === 'object' && module.exports) module.exports = factory();
-  else root.CodexServerRequests = factory();
-})(globalThis, function () {
-  const command = 'item/commandExecution/requestApproval';
-  const file = 'item/fileChange/requestApproval';
-  const input = 'item/tool/requestUserInput';
-  const elicitation = 'mcpServer/elicitation/request';
-  const permissions = 'item/permissions/requestApproval';
-  const equal = (a, b) => JSON.stringify(a) === JSON.stringify(b);
-  const approvalId = request => 'approval:' + (request.params.turnId || '') + ':' + typeof request.id + ':' + request.id;
-  function confirmation(request) {
-    const p = request.params || {}, value = p._meta?.['openai/confirmation'], schema = p.requestedSchema;
-    if (request.method !== elicitation || p.mode !== 'form' || value?.version !== 1
-      || typeof value.field !== 'string' || schema?.type !== 'object'
-      || Object.keys(schema.properties || {}).length !== 1 || schema.properties[value.field]?.type !== 'boolean'
-      || schema.required?.length !== 1 || schema.required[0] !== value.field) return null;
-    return value;
-  }
-  function confirmationResult(request, decision) {
-    return { action: decision, content: decision === 'accept' ? { [confirmation(request).field]: true } : null, _meta: null };
-  }
-  function browserAccess(request) {
-    const p = request.params || {}, meta = p._meta || {};
-    if (request.method !== elicitation || p.mode !== 'form' || meta.tool_name !== 'access_browser_origin'
-      || meta.codex_approval_kind !== 'mcp_tool_call' || meta.codex_request_type !== 'approval_request'
-      || meta.codex_sensitive_action !== true || p.requestedSchema?.type !== 'object'
-      || Object.keys(p.requestedSchema.properties || {}).length) return null;
-    try {
-      const origin = new URL(meta.origin);
-      if (!['http:', 'https:'].includes(origin.protocol) || origin.origin !== meta.origin) return null;
-      return { origin: meta.origin, persistent: meta.persist === 'always' };
-    } catch { return null; }
-  }
-  function browserAction(request) {
-    const p = request.params || {}, meta = p._meta || {};
-    if (browserAccess(request) || request.method !== elicitation || p.mode !== 'form'
-      || p.requestedSchema?.type !== 'object' || Object.keys(p.requestedSchema.properties || {}).length
-      || p.requestedSchema.required?.length || typeof p.message !== 'string' || !p.message.trim()) return null;
-    const tool = meta.codex_approval_kind === 'mcp_tool_call' && meta.connector_id === 'browser-use';
-    if (!tool && !['browser', 'browser-use'].includes(p.serverName)) return null;
-    if (meta.codex_approval_kind && meta.codex_approval_kind !== 'mcp_tool_call') return null;
-    const modes = meta.persist == null ? [] : Array.isArray(meta.persist) ? meta.persist : [meta.persist];
-    if (modes.some(mode => !['session', 'always'].includes(mode))) return null;
-    if (!tool && !modes.length) return null;
-    try {
-      const origin = new URL(meta.origin);
-      if (!['http:', 'https:'].includes(origin.protocol) || origin.origin !== meta.origin) return null;
-      return { origin: meta.origin, session: modes.includes('session'), persistent: modes.includes('always') };
-    } catch { return null; }
-  }
-  function browserActionResult(decision) {
-    return { action: decision === 'cancel' ? 'cancel' : 'accept', content: decision === 'cancel' ? null : {},
-      _meta: decision === 'allowAlways' ? { persist: 'always' }
-        : decision === 'allowSession' ? { persist: 'session' } : null };
-  }
-  function computerAppAccess(request) {
-    const p = request.params || {}, meta = p._meta || {};
-    if (request.method !== elicitation || p.mode !== 'form' || meta.codex_approval_kind !== 'mcp_tool_call'
-      || (meta.codex_request_type != null && meta.codex_request_type !== 'approval_request')
-      || typeof meta.connector_id !== 'string' || p.requestedSchema?.type !== 'object'
-      || Object.keys(p.requestedSchema.properties || {}).length || p.requestedSchema.required?.length) return null;
-    const connector = meta.connector_id.trim().toLowerCase().split(/[^a-z0-9]+/g).filter(Boolean).join('-');
-    if (connector !== 'computer-use' && !connector.startsWith('computer-use-')) return null;
-    const modes = Array.isArray(meta.persist) ? meta.persist : [meta.persist];
-    if (!modes.length || modes.some(mode => !['session', 'always'].includes(mode))) return null;
-    const display = Array.isArray(meta.tool_params_display) ? meta.tool_params_display.find(entry => entry?.name === 'app')?.value : null;
-    const app = typeof display === 'string' && display.trim() ? display : meta.tool_params?.app;
-    if (typeof app !== 'string' || !app.trim()) return null;
-    return { app: app.trim(), session: modes.includes('session'), persistent: modes.includes('always'),
-      subtitle: typeof meta.subtitle === 'string' ? meta.subtitle : '', highRisk: meta.riskLevel === 'high' };
-  }
-  function computerAppResult(request, decision) {
-    const app = computerAppAccess(request);
-    return { action: decision === 'decline' ? 'decline' : 'accept', content: decision === 'decline' ? null : {},
-      _meta: decision === 'allowAlways' ? { persist: 'always' }
-        : decision === 'allowConversation' && app?.session ? { persist: 'session' } : null };
-  }
-  function mcpToolApproval(request) {
-    const p = request.params || {}, meta = p._meta || {};
-    if (request.method !== elicitation || p.mode !== 'form' || meta.codex_approval_kind !== 'mcp_tool_call'
-      || (meta.codex_request_type != null && meta.codex_request_type !== 'approval_request')
-      || p.requestedSchema?.type !== 'object' || Object.keys(p.requestedSchema.properties || {}).length
-      || p.requestedSchema.required?.length || typeof p.message !== 'string' || !p.message.trim()
-      || typeof meta.connector_id !== 'string' || !meta.connector_id.trim()
-      || !meta.tool_params || typeof meta.tool_params !== 'object' || Array.isArray(meta.tool_params)) return null;
-    const connector = meta.connector_id.trim().toLowerCase().split(/[^a-z0-9]+/g).filter(Boolean).join('-');
-    // These requests have dedicated approval semantics in Desktop.
-    if (connector === 'browser-use' || connector === 'computer-use' || connector.startsWith('computer-use-')
-      || meta.tool_name === 'access_browser_origin' || meta.tool_name === 'access_browser_origin_with_raw_cdp'
-      || meta.connector_id === 'connector_20205bf7d4e99a89d7154bb849718324') return null;
-    const modes = meta.persist === undefined ? [] : Array.isArray(meta.persist) ? meta.persist : [meta.persist];
-    if ((Array.isArray(meta.persist) && (!modes.length || modes.length > 2))
-      || modes.some(mode => !['session', 'always'].includes(mode))) return null;
-    return { session: modes.includes('session'), persistent: modes.includes('always') };
-  }
-  function mcpToolResult(decision) {
-    return { action: decision === 'decline' ? 'decline' : 'accept', content: decision === 'decline' ? null : {},
-      _meta: decision === 'allowAlways' ? { persist: 'always' }
-        : decision === 'allowSession' ? { persist: 'session' } : null };
-  }
-  function externalAction(request) {
-    const p = request.params || {};
-    if (request.method !== elicitation || p.mode !== 'url') return null;
-    try {
-      const url = new URL(p.url);
-      if (url.protocol !== 'https:' || url.username || url.password) return null;
-      if (p.serverName !== 'codex_apps') return { url: url.href, connector: null };
-      const connector = p._meta?._codex_apps?.connector_auth_failure;
-      const trusted = host => ['chatgpt.com', 'chatgpt-staging.com'].some(domain => host === domain || host.endsWith('.' + domain));
-      if (!trusted(url.hostname) || connector?.is_auth_failure !== true
-        || typeof connector.connector_id !== 'string' || typeof connector.connector_name !== 'string'
-        || typeof connector.install_url !== 'string' || connector.connection_consent != null) return null;
-      return { url: url.href, connector };
-    } catch { return null; }
-  }
-  function elicitationResult(action, content = null) { return { action, content: action === 'accept' ? content : null, _meta: null }; }
-  function fieldOptions(field) {
-    const schema = field.type === 'array' ? field.items : field;
-    if (Array.isArray(schema?.enum)) return schema.enum.map((value, index) => ({ value, label: schema.enumNames?.[index] || value }));
-    const options = schema?.oneOf || schema?.anyOf;
-    return Array.isArray(options) ? options.map(option => ({ value: option.const, label: option.title || option.const })) : null;
-  }
-  function formSchema(request) {
-    const p = request.params || {}, meta = p._meta || {}, schema = p.requestedSchema;
-    // Specialized approvals, credentials and OpenAI forms have their own response contracts.
-    if (request.method !== elicitation || p.mode !== 'form' || meta.codex_approval_kind
-      || meta['openai/elicitation'] || meta['openai/confirmation'] || schema?.type !== 'object'
-      || ['browser', 'browser-use'].includes(p.serverName)
-      || !schema.properties || typeof schema.properties !== 'object' || Array.isArray(schema.properties)
-      || Object.keys(schema).some(key => !['$schema', 'type', 'properties', 'required'].includes(key))) return null;
-    const known = ['type', 'title', 'description', 'default', 'minLength', 'maxLength', 'format', 'minimum', 'maximum', 'enum', 'enumNames', 'oneOf', 'items', 'minItems', 'maxItems'];
-    for (const field of Object.values(schema.properties)) {
-      if (!field || Object.keys(field).some(key => !known.includes(key))
-        || !['string', 'number', 'integer', 'boolean', 'array'].includes(field.type)) return null;
-      const options = fieldOptions(field);
-      if ((field.type === 'array' || field.enum != null || field.oneOf != null) && !options
-        || options && (!options.length || options.some(option => typeof option.value !== 'string' || typeof option.label !== 'string'))) return null;
-      if (field.format && !['email', 'uri', 'date', 'date-time'].includes(field.format)) return null;
-    }
-    if (schema.required != null && (!Array.isArray(schema.required) || schema.required.some(key => !Object.hasOwn(schema.properties, key)))) return null;
-    return schema;
-  }
-  function validateForm(schema, values) {
-    if (!values || typeof values !== 'object' || Array.isArray(values)
-      || Object.keys(values).some(key => !Object.hasOwn(schema.properties, key))) throw new Error('表单内容无效');
-    for (const [key, field] of Object.entries(schema.properties)) {
-      const value = values[key], label = field.title || key;
-      if (value === undefined) { if (schema.required?.includes(key)) throw new Error(`请填写${label}`); continue; }
-      let valid = field.type === 'array' ? Array.isArray(value) : typeof value === (field.type === 'integer' ? 'number' : field.type);
-      if (typeof value === 'number') valid &&= Number.isFinite(value) && (field.type !== 'integer' || Number.isInteger(value))
-        && (field.minimum == null || value >= field.minimum) && (field.maximum == null || value <= field.maximum);
-      if (typeof value === 'string') {
-        valid &&= (field.minLength == null || [...value].length >= field.minLength) && (field.maxLength == null || [...value].length <= field.maxLength);
-        if (field.format === 'email') valid &&= /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value);
-        if (field.format === 'uri') { try { new URL(value); } catch { valid = false; } }
-        if (field.format === 'date') valid &&= /^\d{4}-\d{2}-\d{2}$/.test(value) && !Number.isNaN(Date.parse(value));
-        if (field.format === 'date-time') valid &&= /^\d{4}-\d{2}-\d{2}T.+(?:Z|[+-]\d{2}:\d{2})$/.test(value) && !Number.isNaN(Date.parse(value));
-      }
-      const options = fieldOptions(field);
-      if (Array.isArray(value)) valid &&= new Set(value).size === value.length && (field.minItems == null || value.length >= field.minItems)
-        && (field.maxItems == null || value.length <= field.maxItems) && value.every(item => options?.some(option => option.value === item));
-      else if (options) valid &&= options.some(option => option.value === value);
-      if (!valid) throw new Error(`${label}的内容不符合请求要求`);
-    }
-  }
-  function permissionResult(request, decision) {
-    return { permissions: decision === 'decline' ? {} : request.params.permissions, scope: decision === 'acceptForSession' ? 'session' : 'turn' };
-  }
-  function blocksComposer(request) {
-    if (externalAction(request)) return false;
-    return request.method === input || Boolean(formSchema(request))
-      || request.method !== elicitation && decisions(request).length > 0
-      || request.method === elicitation && decisions(request).some(value => value !== 'cancel');
-  }
-  function decisions(request) {
-    if (confirmation(request)) return ['decline', 'accept'];
-    if (request.method === command) return request.params.availableDecisions ?? ['accept', 'acceptForSession', 'decline', 'cancel'];
-    if (request.method === file) return ['accept', 'acceptForSession', 'decline', 'cancel'];
-    if (request.method === permissions && request.params.permissions) return ['accept', 'acceptForSession', 'decline'];
-    if (externalAction(request)) return ['decline', 'accept'];
-    const action = browserAction(request);
-    if (action) return ['allowOnce', ...(action.session ? ['allowSession'] : []), ...(action.persistent ? ['allowAlways'] : []), 'cancel'];
-    const app = computerAppAccess(request);
-    if (app) return ['decline', 'allowConversation', ...(app.persistent ? ['allowAlways'] : [])];
-    const browser = browserAccess(request);
-    if (browser) return browser.persistent ? ['allowOnce', 'allowSite', 'allowAllSites', 'decline'] : ['allowOnce', 'decline'];
-    const tool = mcpToolApproval(request);
-    if (tool) return ['decline', 'allowOnce', ...(tool.session ? ['allowSession'] : []), ...(tool.persistent ? ['allowAlways'] : [])];
-    return request.method === elicitation ? ['cancel'] : [];
-  }
-  function validate(request, result) {
-    if (request.method === elicitation && equal(result, elicitationResult('cancel'))) return;
-    if (externalAction(request)) {
-      if (!['accept', 'decline'].some(action => equal(result, elicitationResult(action)))) throw new Error('外部操作结果无效');
-      return;
-    }
-    const schema = formSchema(request);
-    if (schema) {
-      if (equal(result, elicitationResult('decline'))) return;
-      if (result?.action !== 'accept' || result._meta !== null || Object.keys(result).length !== 3) throw new Error('表单响应格式无效');
-      validateForm(schema, result.content); return;
-    }
-    if (request.method === permissions) {
-      if (!decisions(request).some(decision => equal(result, permissionResult(request, decision)))) throw new Error('权限决定不属于当前请求');
-      return;
-    }
-    if (confirmation(request)) {
-      if (!decisions(request).some(decision => equal(confirmationResult(request, decision), result))) throw new Error('确认结果不属于当前请求');
-      return;
-    }
-    if ([command, file].includes(request.method)) {
-      if (!result || Object.keys(result).length !== 1 || !decisions(request).some(value => equal(value, result.decision))) throw new Error('审批选项不属于当前请求');
-      return;
-    }
-    if (request.method === input) {
-      const questions = request.params.questions || [];
-      if (!result?.answers || Object.keys(result).length !== 1 || Object.keys(result.answers).length !== questions.length
-        || questions.some(q => !Array.isArray(result.answers[q.id]?.answers) || result.answers[q.id].answers.some(a => typeof a !== 'string'))) throw new Error('回答格式无效');
-      return;
-    }
-    if (browserAction(request)) {
-      if (!decisions(request).some(decision => equal(browserActionResult(decision), result))) throw new Error('浏览器操作决定不属于当前请求');
-      return;
-    }
-    if (computerAppAccess(request)) {
-      if (!decisions(request).some(decision => equal(computerAppResult(request, decision), result))) throw new Error('应用访问决定不属于当前请求');
-      return;
-    }
-    const browser = browserAccess(request);
-    if (browser) {
-      const allowed = [
-        { action: 'accept', content: {}, _meta: null },
-        { action: 'decline', content: null, _meta: null },
-      ];
-      if (browser.persistent) allowed.push(
-        { action: 'accept', content: {}, _meta: { persist: 'always' } },
-        { action: 'accept', content: {}, _meta: { persist: 'always', browser_use_persistent_approval_scope: 'all-sites' } },
-      );
-      if (!allowed.some(choice => equal(choice, result))) throw new Error('网站访问决定不属于当前请求');
-      return;
-    }
-    if (mcpToolApproval(request)) {
-      if (!decisions(request).some(decision => equal(mcpToolResult(decision), result))) throw new Error('工具授权决定不属于当前请求');
-      return;
-    }
-    throw new Error('此类请求需在工作站处理');
-  }
-  class Store {
-    constructor(epoch, changed = () => {}) {
-      this.epoch = epoch; this.changed = changed; this.requests = new Map(); this.approvalHistory = new Map();
-    }
-    list(threadId) { return [...this.requests.values()].filter(r => r.params.threadId === threadId).map(r => ({ ...r })); }
-    history(threadId) { return [...this.approvalHistory.values()].filter(r => r.params.threadId === threadId).map(r => ({ ...r })); }
-    complete(request, status) {
-      const approval = this.approvalHistory.get(approvalId(request));
-      if (approval) { approval.status = status; approval.completedAtMs = Date.now(); }
-    }
-    receive(message) {
-      if (!['string', 'number'].includes(typeof message.id) || !message.params?.threadId || this.requests.has(message.id)) return;
-      const request = { id: message.id, method: message.method, params: message.params, epoch: this.epoch, status: 'pending' };
-      if (request.method !== input) this.approvalHistory.set(approvalId(request), {
-        type: 'approval', id: approvalId(request), requestId: request.id, method: request.method,
-        params: request.params, turnId: request.params.turnId, status: 'pending', receivedAtMs: Date.now(),
-      });
-      this.requests.set(message.id, request); this.changed(request.params.threadId);
-    }
-    notification(method, params) {
-      if (method === 'serverRequest/resolved') {
-        const request = this.requests.get(params.requestId);
-        if (request?.params.threadId === params.threadId) {
-          this.complete(request, 'resolved'); this.requests.delete(params.requestId); this.changed(params.threadId);
-        }
-      } else if (method === 'turn/completed' || method === 'thread/closed') {
-        for (const [id, r] of this.requests) if (r.params.threadId === params.threadId && (method === 'thread/closed' || r.params.turnId === params.turn?.id)) {
-          this.complete(r, 'expired'); this.requests.delete(id);
-        }
-        this.changed(params.threadId);
-      }
-    }
-    forget(threadId) {
-      for (const [id, request] of this.requests) if (request.params.threadId === threadId) this.requests.delete(id);
-      for (const [id, approval] of this.approvalHistory) if (approval.params.threadId === threadId) this.approvalHistory.delete(id);
-      this.changed(threadId);
-    }
-    reset(epoch) {
-      const threads = new Set([...this.requests.values()].map(r => r.params.threadId));
-      for (const request of this.requests.values()) this.complete(request, 'expired');
-      this.requests.clear(); this.epoch = epoch; for (const id of threads) this.changed(id);
-      this.approvalHistory.clear();
-    }
-    async respond(threadId, { id, epoch, result }, send) {
-      const request = this.requests.get(id);
-      if (!request || epoch !== this.epoch || request.params.threadId !== threadId) throw new Error('审批已处理或连接已变化，请等待同步');
-      if (request.status !== 'pending') throw new Error('决定已提交，正在等待工作站确认，请勿重复提交');
-      validate(request, result);
-      const approval = this.approvalHistory.get(approvalId(request));
-      if (approval) { approval.status = 'submitted'; approval.result = result; }
-      request.status = 'submitted'; this.changed(threadId);
-      try { await send({ id: request.id, result }); }
-      catch (error) {
-        if (this.requests.get(id) === request) {
-          request.status = 'unknown'; if (approval) approval.status = 'unknown'; this.changed(threadId);
-        }
-        throw new Error('审批发送结果未确认，请检查工作站；不会自动重发。' + error.message);
-      }
-      return { submitted: true };
-    }
-  }
-  return { Store, decisions, validate, command, file, input, elicitation, permissions, externalAction, elicitationResult, formSchema, fieldOptions, validateForm, permissionResult, blocksComposer, browserAccess, browserAction, browserActionResult, computerAppAccess, computerAppResult, mcpToolApproval, mcpToolResult, confirmation, confirmationResult };
-});
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory();
+  else root.CodexServerRequests = factory();
+})(globalThis, function () {
+  const command = 'item/commandExecution/requestApproval';
+  const file = 'item/fileChange/requestApproval';
+  const input = 'item/tool/requestUserInput';
+  const elicitation = 'mcpServer/elicitation/request';
+  const permissions = 'item/permissions/requestApproval';
+  const equal = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+  const approvalId = request => 'approval:' + (request.params.turnId || '') + ':' + typeof request.id + ':' + request.id;
+  function confirmation(request) {
+    const p = request.params || {}, value = p._meta?.['openai/confirmation'], schema = p.requestedSchema;
+    if (request.method !== elicitation || p.mode !== 'form' || value?.version !== 1
+      || typeof value.field !== 'string' || schema?.type !== 'object'
+      || Object.keys(schema.properties || {}).length !== 1 || schema.properties[value.field]?.type !== 'boolean'
+      || schema.required?.length !== 1 || schema.required[0] !== value.field) return null;
+    return value;
+  }
+  function confirmationResult(request, decision) {
+    return { action: decision, content: decision === 'accept' ? { [confirmation(request).field]: true } : null, _meta: null };
+  }
+  function browserAccess(request) {
+    const p = request.params || {}, meta = p._meta || {};
+    if (request.method !== elicitation || p.mode !== 'form' || meta.tool_name !== 'access_browser_origin'
+      || meta.codex_approval_kind !== 'mcp_tool_call' || meta.codex_request_type !== 'approval_request'
+      || meta.codex_sensitive_action !== true || p.requestedSchema?.type !== 'object'
+      || Object.keys(p.requestedSchema.properties || {}).length) return null;
+    try {
+      const origin = new URL(meta.origin);
+      if (!['http:', 'https:'].includes(origin.protocol) || origin.origin !== meta.origin) return null;
+      return { origin: meta.origin, persistent: meta.persist === 'always' };
+    } catch { return null; }
+  }
+  function browserAction(request) {
+    const p = request.params || {}, meta = p._meta || {};
+    if (browserAccess(request) || request.method !== elicitation || p.mode !== 'form'
+      || p.requestedSchema?.type !== 'object' || Object.keys(p.requestedSchema.properties || {}).length
+      || p.requestedSchema.required?.length || typeof p.message !== 'string' || !p.message.trim()) return null;
+    const tool = meta.codex_approval_kind === 'mcp_tool_call' && meta.connector_id === 'browser-use';
+    if (!tool && !['browser', 'browser-use'].includes(p.serverName)) return null;
+    if (meta.codex_approval_kind && meta.codex_approval_kind !== 'mcp_tool_call') return null;
+    const modes = meta.persist == null ? [] : Array.isArray(meta.persist) ? meta.persist : [meta.persist];
+    if (modes.some(mode => !['session', 'always'].includes(mode))) return null;
+    if (!tool && !modes.length) return null;
+    try {
+      const origin = new URL(meta.origin);
+      if (!['http:', 'https:'].includes(origin.protocol) || origin.origin !== meta.origin) return null;
+      return { origin: meta.origin, session: modes.includes('session'), persistent: modes.includes('always') };
+    } catch { return null; }
+  }
+  function browserActionResult(decision) {
+    return { action: decision === 'cancel' ? 'cancel' : 'accept', content: decision === 'cancel' ? null : {},
+      _meta: decision === 'allowAlways' ? { persist: 'always' }
+        : decision === 'allowSession' ? { persist: 'session' } : null };
+  }
+  function computerAppAccess(request) {
+    const p = request.params || {}, meta = p._meta || {};
+    if (request.method !== elicitation || p.mode !== 'form' || meta.codex_approval_kind !== 'mcp_tool_call'
+      || (meta.codex_request_type != null && meta.codex_request_type !== 'approval_request')
+      || typeof meta.connector_id !== 'string' || p.requestedSchema?.type !== 'object'
+      || Object.keys(p.requestedSchema.properties || {}).length || p.requestedSchema.required?.length) return null;
+    const connector = meta.connector_id.trim().toLowerCase().split(/[^a-z0-9]+/g).filter(Boolean).join('-');
+    if (connector !== 'computer-use' && !connector.startsWith('computer-use-')) return null;
+    const modes = Array.isArray(meta.persist) ? meta.persist : [meta.persist];
+    if (!modes.length || modes.some(mode => !['session', 'always'].includes(mode))) return null;
+    const display = Array.isArray(meta.tool_params_display) ? meta.tool_params_display.find(entry => entry?.name === 'app')?.value : null;
+    const app = typeof display === 'string' && display.trim() ? display : meta.tool_params?.app;
+    if (typeof app !== 'string' || !app.trim()) return null;
+    return { app: app.trim(), session: modes.includes('session'), persistent: modes.includes('always'),
+      subtitle: typeof meta.subtitle === 'string' ? meta.subtitle : '', highRisk: meta.riskLevel === 'high' };
+  }
+  function computerAppResult(request, decision) {
+    const app = computerAppAccess(request);
+    return { action: decision === 'decline' ? 'decline' : 'accept', content: decision === 'decline' ? null : {},
+      _meta: decision === 'allowAlways' ? { persist: 'always' }
+        : decision === 'allowConversation' && app?.session ? { persist: 'session' } : null };
+  }
+  function mcpToolApproval(request) {
+    const p = request.params || {}, meta = p._meta || {};
+    if (request.method !== elicitation || p.mode !== 'form' || meta.codex_approval_kind !== 'mcp_tool_call'
+      || (meta.codex_request_type != null && meta.codex_request_type !== 'approval_request')
+      || p.requestedSchema?.type !== 'object' || Object.keys(p.requestedSchema.properties || {}).length
+      || p.requestedSchema.required?.length || typeof p.message !== 'string' || !p.message.trim()
+      || typeof meta.connector_id !== 'string' || !meta.connector_id.trim()
+      || !meta.tool_params || typeof meta.tool_params !== 'object' || Array.isArray(meta.tool_params)) return null;
+    const connector = meta.connector_id.trim().toLowerCase().split(/[^a-z0-9]+/g).filter(Boolean).join('-');
+    // These requests have dedicated approval semantics in Desktop.
+    if (connector === 'browser-use' || connector === 'computer-use' || connector.startsWith('computer-use-')
+      || meta.tool_name === 'access_browser_origin' || meta.tool_name === 'access_browser_origin_with_raw_cdp'
+      || meta.connector_id === 'connector_20205bf7d4e99a89d7154bb849718324') return null;
+    const modes = meta.persist === undefined ? [] : Array.isArray(meta.persist) ? meta.persist : [meta.persist];
+    if ((Array.isArray(meta.persist) && (!modes.length || modes.length > 2))
+      || modes.some(mode => !['session', 'always'].includes(mode))) return null;
+    return { session: modes.includes('session'), persistent: modes.includes('always') };
+  }
+  function mcpToolResult(decision) {
+    return { action: decision === 'decline' ? 'decline' : 'accept', content: decision === 'decline' ? null : {},
+      _meta: decision === 'allowAlways' ? { persist: 'always' }
+        : decision === 'allowSession' ? { persist: 'session' } : null };
+  }
+  function externalAction(request) {
+    const p = request.params || {};
+    if (request.method !== elicitation || p.mode !== 'url') return null;
+    try {
+      const url = new URL(p.url);
+      if (url.protocol !== 'https:' || url.username || url.password) return null;
+      if (p.serverName !== 'codex_apps') return { url: url.href, connector: null };
+      const connector = p._meta?._codex_apps?.connector_auth_failure;
+      const trusted = host => ['chatgpt.com', 'chatgpt-staging.com'].some(domain => host === domain || host.endsWith('.' + domain));
+      if (!trusted(url.hostname) || connector?.is_auth_failure !== true
+        || typeof connector.connector_id !== 'string' || typeof connector.connector_name !== 'string'
+        || typeof connector.install_url !== 'string' || connector.connection_consent != null) return null;
+      return { url: url.href, connector };
+    } catch { return null; }
+  }
+  function elicitationResult(action, content = null) { return { action, content: action === 'accept' ? content : null, _meta: null }; }
+  function fieldOptions(field) {
+    const schema = field.type === 'array' ? field.items : field;
+    if (Array.isArray(schema?.enum)) return schema.enum.map((value, index) => ({ value, label: schema.enumNames?.[index] || value }));
+    const options = schema?.oneOf || schema?.anyOf;
+    return Array.isArray(options) ? options.map(option => ({ value: option.const, label: option.title || option.const })) : null;
+  }
+  function formSchema(request) {
+    const p = request.params || {}, meta = p._meta || {}, schema = p.requestedSchema;
+    // Specialized approvals, credentials and OpenAI forms have their own response contracts.
+    if (request.method !== elicitation || p.mode !== 'form' || meta.codex_approval_kind
+      || meta['openai/elicitation'] || meta['openai/confirmation'] || schema?.type !== 'object'
+      || ['browser', 'browser-use'].includes(p.serverName)
+      || !schema.properties || typeof schema.properties !== 'object' || Array.isArray(schema.properties)
+      || Object.keys(schema).some(key => !['$schema', 'type', 'properties', 'required'].includes(key))) return null;
+    const known = ['type', 'title', 'description', 'default', 'minLength', 'maxLength', 'format', 'minimum', 'maximum', 'enum', 'enumNames', 'oneOf', 'items', 'minItems', 'maxItems'];
+    for (const field of Object.values(schema.properties)) {
+      if (!field || Object.keys(field).some(key => !known.includes(key))
+        || !['string', 'number', 'integer', 'boolean', 'array'].includes(field.type)) return null;
+      const options = fieldOptions(field);
+      if ((field.type === 'array' || field.enum != null || field.oneOf != null) && !options
+        || options && (!options.length || options.some(option => typeof option.value !== 'string' || typeof option.label !== 'string'))) return null;
+      if (field.format && !['email', 'uri', 'date', 'date-time'].includes(field.format)) return null;
+    }
+    if (schema.required != null && (!Array.isArray(schema.required) || schema.required.some(key => !Object.hasOwn(schema.properties, key)))) return null;
+    return schema;
+  }
+  function validateForm(schema, values) {
+    if (!values || typeof values !== 'object' || Array.isArray(values)
+      || Object.keys(values).some(key => !Object.hasOwn(schema.properties, key))) throw new Error('表单内容无效');
+    for (const [key, field] of Object.entries(schema.properties)) {
+      const value = values[key], label = field.title || key;
+      if (value === undefined) { if (schema.required?.includes(key)) throw new Error(`请填写${label}`); continue; }
+      let valid = field.type === 'array' ? Array.isArray(value) : typeof value === (field.type === 'integer' ? 'number' : field.type);
+      if (typeof value === 'number') valid &&= Number.isFinite(value) && (field.type !== 'integer' || Number.isInteger(value))
+        && (field.minimum == null || value >= field.minimum) && (field.maximum == null || value <= field.maximum);
+      if (typeof value === 'string') {
+        valid &&= (field.minLength == null || [...value].length >= field.minLength) && (field.maxLength == null || [...value].length <= field.maxLength);
+        if (field.format === 'email') valid &&= /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value);
+        if (field.format === 'uri') { try { new URL(value); } catch { valid = false; } }
+        if (field.format === 'date') valid &&= /^\d{4}-\d{2}-\d{2}$/.test(value) && !Number.isNaN(Date.parse(value));
+        if (field.format === 'date-time') valid &&= /^\d{4}-\d{2}-\d{2}T.+(?:Z|[+-]\d{2}:\d{2})$/.test(value) && !Number.isNaN(Date.parse(value));
+      }
+      const options = fieldOptions(field);
+      if (Array.isArray(value)) valid &&= new Set(value).size === value.length && (field.minItems == null || value.length >= field.minItems)
+        && (field.maxItems == null || value.length <= field.maxItems) && value.every(item => options?.some(option => option.value === item));
+      else if (options) valid &&= options.some(option => option.value === value);
+      if (!valid) throw new Error(`${label}的内容不符合请求要求`);
+    }
+  }
+  function permissionResult(request, decision) {
+    return { permissions: decision === 'decline' ? {} : request.params.permissions, scope: decision === 'acceptForSession' ? 'session' : 'turn' };
+  }
+  function blocksComposer(request) {
+    if (externalAction(request)) return false;
+    return request.method === input || Boolean(formSchema(request))
+      || request.method !== elicitation && decisions(request).length > 0
+      || request.method === elicitation && decisions(request).some(value => value !== 'cancel');
+  }
+  function decisions(request) {
+    if (confirmation(request)) return ['decline', 'accept'];
+    if (request.method === command) return request.params.availableDecisions ?? ['accept', 'acceptForSession', 'decline', 'cancel'];
+    if (request.method === file) return ['accept', 'acceptForSession', 'decline', 'cancel'];
+    if (request.method === permissions && request.params.permissions) return ['accept', 'acceptForSession', 'decline'];
+    if (externalAction(request)) return ['decline', 'accept'];
+    const action = browserAction(request);
+    if (action) return ['allowOnce', ...(action.session ? ['allowSession'] : []), ...(action.persistent ? ['allowAlways'] : []), 'cancel'];
+    const app = computerAppAccess(request);
+    if (app) return ['decline', 'allowConversation', ...(app.persistent ? ['allowAlways'] : [])];
+    const browser = browserAccess(request);
+    if (browser) return browser.persistent ? ['allowOnce', 'allowSite', 'allowAllSites', 'decline'] : ['allowOnce', 'decline'];
+    const tool = mcpToolApproval(request);
+    if (tool) return ['decline', 'allowOnce', ...(tool.session ? ['allowSession'] : []), ...(tool.persistent ? ['allowAlways'] : [])];
+    return request.method === elicitation ? ['cancel'] : [];
+  }
+  function validate(request, result) {
+    if (request.method === elicitation && equal(result, elicitationResult('cancel'))) return;
+    if (externalAction(request)) {
+      if (!['accept', 'decline'].some(action => equal(result, elicitationResult(action)))) throw new Error('外部操作结果无效');
+      return;
+    }
+    const schema = formSchema(request);
+    if (schema) {
+      if (equal(result, elicitationResult('decline'))) return;
+      if (result?.action !== 'accept' || result._meta !== null || Object.keys(result).length !== 3) throw new Error('表单响应格式无效');
+      validateForm(schema, result.content); return;
+    }
+    if (request.method === permissions) {
+      if (!decisions(request).some(decision => equal(result, permissionResult(request, decision)))) throw new Error('权限决定不属于当前请求');
+      return;
+    }
+    if (confirmation(request)) {
+      if (!decisions(request).some(decision => equal(confirmationResult(request, decision), result))) throw new Error('确认结果不属于当前请求');
+      return;
+    }
+    if ([command, file].includes(request.method)) {
+      if (!result || Object.keys(result).length !== 1 || !decisions(request).some(value => equal(value, result.decision))) throw new Error('审批选项不属于当前请求');
+      return;
+    }
+    if (request.method === input) {
+      const questions = request.params.questions || [];
+      if (!result?.answers || Object.keys(result).length !== 1 || Object.keys(result.answers).length !== questions.length
+        || questions.some(q => !Array.isArray(result.answers[q.id]?.answers) || result.answers[q.id].answers.some(a => typeof a !== 'string'))) throw new Error('回答格式无效');
+      return;
+    }
+    if (browserAction(request)) {
+      if (!decisions(request).some(decision => equal(browserActionResult(decision), result))) throw new Error('浏览器操作决定不属于当前请求');
+      return;
+    }
+    if (computerAppAccess(request)) {
+      if (!decisions(request).some(decision => equal(computerAppResult(request, decision), result))) throw new Error('应用访问决定不属于当前请求');
+      return;
+    }
+    const browser = browserAccess(request);
+    if (browser) {
+      const allowed = [
+        { action: 'accept', content: {}, _meta: null },
+        { action: 'decline', content: null, _meta: null },
+      ];
+      if (browser.persistent) allowed.push(
+        { action: 'accept', content: {}, _meta: { persist: 'always' } },
+        { action: 'accept', content: {}, _meta: { persist: 'always', browser_use_persistent_approval_scope: 'all-sites' } },
+      );
+      if (!allowed.some(choice => equal(choice, result))) throw new Error('网站访问决定不属于当前请求');
+      return;
+    }
+    if (mcpToolApproval(request)) {
+      if (!decisions(request).some(decision => equal(mcpToolResult(decision), result))) throw new Error('工具授权决定不属于当前请求');
+      return;
+    }
+    throw new Error('此类请求需在工作站处理');
+  }
+  class Store {
+    constructor(epoch, changed = () => {}) {
+      this.epoch = epoch; this.changed = changed; this.requests = new Map(); this.approvalHistory = new Map();
+    }
+    list(threadId) { return [...this.requests.values()].filter(r => r.params.threadId === threadId).map(r => ({ ...r })); }
+    history(threadId) { return [...this.approvalHistory.values()].filter(r => r.params.threadId === threadId).map(r => ({ ...r })); }
+    complete(request, status) {
+      const approval = this.approvalHistory.get(approvalId(request));
+      if (approval) { approval.status = status; approval.completedAtMs = Date.now(); }
+    }
+    receive(message) {
+      if (!['string', 'number'].includes(typeof message.id) || !message.params?.threadId || this.requests.has(message.id)) return;
+      const request = { id: message.id, method: message.method, params: message.params, epoch: this.epoch, status: 'pending' };
+      if (request.method !== input) this.approvalHistory.set(approvalId(request), {
+        type: 'approval', id: approvalId(request), requestId: request.id, method: request.method,
+        params: request.params, turnId: request.params.turnId, status: 'pending', receivedAtMs: Date.now(),
+      });
+      this.requests.set(message.id, request); this.changed(request.params.threadId);
+    }
+    notification(method, params) {
+      if (method === 'serverRequest/resolved') {
+        const request = this.requests.get(params.requestId);
+        if (request?.params.threadId === params.threadId) {
+          this.complete(request, 'resolved'); this.requests.delete(params.requestId); this.changed(params.threadId);
+        }
+      } else if (method === 'turn/completed' || method === 'thread/closed') {
+        for (const [id, r] of this.requests) if (r.params.threadId === params.threadId && (method === 'thread/closed' || r.params.turnId === params.turn?.id)) {
+          this.complete(r, 'expired'); this.requests.delete(id);
+        }
+        this.changed(params.threadId);
+      }
+    }
+    forget(threadId) {
+      for (const [id, request] of this.requests) if (request.params.threadId === threadId) this.requests.delete(id);
+      for (const [id, approval] of this.approvalHistory) if (approval.params.threadId === threadId) this.approvalHistory.delete(id);
+      this.changed(threadId);
+    }
+    reset(epoch) {
+      const threads = new Set([...this.requests.values()].map(r => r.params.threadId));
+      for (const request of this.requests.values()) this.complete(request, 'expired');
+      this.requests.clear(); this.epoch = epoch; for (const id of threads) this.changed(id);
+      this.approvalHistory.clear();
+    }
+    async respond(threadId, { id, epoch, result }, send) {
+      const request = this.requests.get(id);
+      if (!request || epoch !== this.epoch || request.params.threadId !== threadId) throw new Error('审批已处理或连接已变化，请等待同步');
+      if (request.status !== 'pending') throw new Error('决定已提交，正在等待工作站确认，请勿重复提交');
+      validate(request, result);
+      const approval = this.approvalHistory.get(approvalId(request));
+      if (approval) { approval.status = 'submitted'; approval.result = result; }
+      request.status = 'submitted'; this.changed(threadId);
+      try { await send({ id: request.id, result }); }
+      catch (error) {
+        if (this.requests.get(id) === request) {
+          request.status = 'unknown'; if (approval) approval.status = 'unknown'; this.changed(threadId);
+        }
+        throw new Error('审批发送结果未确认，请检查工作站；不会自动重发。' + error.message);
+      }
+      return { submitted: true };
+    }
+  }
+  return { Store, decisions, validate, command, file, input, elicitation, permissions, externalAction, elicitationResult, formSchema, fieldOptions, validateForm, permissionResult, blocksComposer, browserAccess, browserAction, browserActionResult, computerAppAccess, computerAppResult, mcpToolApproval, mcpToolResult, confirmation, confirmationResult };
+});