@xfey/tutti 0.1.32 → 0.1.34

package/dist/server-shell/local-console/server.js

@@ -0,0 +1,408 @@
+import { timingSafeEqual } from "node:crypto";
+import { existsSync, statSync } from "node:fs";
+import { resolve } from "node:path";
+import fastify from "fastify";
+import { resolveTuttiHome } from "../../providers/openai/index.js";
+import { readCliVersion } from "../cli/version.js";
+import { registerHostWebStaticRoutes, resolvePackagedWebStaticRoot } from "../http/static-web.js";
+import { detectLocalFolderPicker, pickLocalFolder } from "./folder-picker.js";
+import { LOCAL_CONSOLE_INVOCATION_ENV_KEYS, createLocalConsoleServiceEnvironment, } from "./invocation-context.js";
+import { LocalConsoleProjectError, LocalConsoleProjectService, } from "./project-service.js";
+import { LOCAL_CONSOLE_SESSION_COOKIE, LocalConsoleSessionRegistry, localConsoleSessionCookie, parseCookieHeader, } from "./session.js";
+import { createLocalConsoleSecret, deleteLocalConsoleRuntimeEndpoint, writeLocalConsoleRuntimeEndpoint, } from "./runtime-endpoint.js";
+export const LOCAL_CONSOLE_API_BASE = "/local-console/v1";
+class LocalConsoleHttpError extends Error {
+    statusCode;
+    code;
+    constructor(statusCode, code, message) {
+        super(message);
+        this.statusCode = statusCode;
+        this.code = code;
+        this.name = "LocalConsoleHttpError";
+    }
+}
+function isValidationError(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "validation" in error &&
+        Array.isArray(error.validation));
+}
+function headerValue(value) {
+    return typeof value === "string" || value === undefined ? value : value[0];
+}
+function bearerToken(value) {
+    const header = headerValue(value);
+    const match = header === undefined ? null : /^Bearer\s+(.+)$/iu.exec(header.trim());
+    return match?.[1] ?? null;
+}
+function tokenEquals(value, expected) {
+    if (value === null || value.length === 0 || expected.length === 0) {
+        return false;
+    }
+    const actualBuffer = Buffer.from(value);
+    const expectedBuffer = Buffer.from(expected);
+    return (actualBuffer.length === expectedBuffer.length && timingSafeEqual(actualBuffer, expectedBuffer));
+}
+function requestOrigin(request) {
+    return `http://${headerValue(request.headers.host) ?? ""}`;
+}
+function requireSameOrigin(request) {
+    const origin = headerValue(request.headers.origin);
+    const fetchSite = headerValue(request.headers["sec-fetch-site"]);
+    if (origin !== requestOrigin(request) ||
+        (fetchSite !== undefined && fetchSite !== "same-origin" && fetchSite !== "none")) {
+        throw new LocalConsoleHttpError(403, "origin_rejected", "Local Console origin was rejected.");
+    }
+}
+function requireLoopbackHost(request) {
+    const host = headerValue(request.headers.host) ?? "";
+    if (!/^127\.0\.0\.1:\d+$/u.test(host)) {
+        throw new LocalConsoleHttpError(400, "host_rejected", "Local Console requires 127.0.0.1.");
+    }
+}
+export function createLocalConsoleServer(options) {
+    const app = fastify({ logger: false, bodyLimit: 64 * 1024 });
+    const tuttiHome = options.tuttiHome ?? resolveTuttiHome(options.env?.TUTTI_HOME, options.cwd);
+    const sessions = new LocalConsoleSessionRegistry({
+        ...(options.now === undefined ? {} : { now: options.now }),
+    });
+    const projects = new LocalConsoleProjectService({
+        tuttiHome,
+        ...(options.env === undefined ? {} : { serviceEnvironment: options.env }),
+    });
+    app.addHook("onRequest", (request, reply, done) => {
+        try {
+            requireLoopbackHost(request);
+            void reply
+                .header("x-content-type-options", "nosniff")
+                .header("x-frame-options", "DENY")
+                .header("referrer-policy", "no-referrer")
+                .header("content-security-policy", "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'");
+            if (request.url.startsWith(LOCAL_CONSOLE_API_BASE)) {
+                void reply.header("cache-control", "no-store");
+            }
+            done();
+        }
+        catch (error) {
+            done(error);
+        }
+    });
+    app.setErrorHandler((error, _request, reply) => {
+        const normalized = error instanceof LocalConsoleHttpError || error instanceof LocalConsoleProjectError
+            ? error
+            : isValidationError(error)
+                ? new LocalConsoleHttpError(400, "bad_request", "Local Console request is invalid.")
+                : new LocalConsoleHttpError(500, "local_console_failed", "Local Console request failed.");
+        void reply.status(normalized.statusCode).send({
+            error: {
+                code: normalized.code,
+                message: normalized.message,
+                retryable: normalized.statusCode >= 500,
+            },
+        });
+    });
+    function requireControl(request) {
+        if (!tokenEquals(bearerToken(request.headers.authorization), options.controlToken)) {
+            throw new LocalConsoleHttpError(401, "unauthorized", "Local Console control token is invalid.");
+        }
+        options.onActivity?.();
+    }
+    function requireSession(request, csrf = false) {
+        const cookie = parseCookieHeader(headerValue(request.headers.cookie));
+        const session = sessions.readSession(cookie[LOCAL_CONSOLE_SESSION_COOKIE], headerValue(request.headers["x-local-console-context"]));
+        if (session === null) {
+            throw new LocalConsoleHttpError(401, "session_required", "Open Tutti from the CLI again.");
+        }
+        if (csrf) {
+            requireSameOrigin(request);
+            const csrfToken = headerValue(request.headers["x-local-console-csrf"]);
+            if (!tokenEquals(csrfToken ?? null, session.csrfToken)) {
+                throw new LocalConsoleHttpError(403, "csrf_rejected", "Local Console request was rejected.");
+            }
+        }
+        options.onActivity?.();
+        return session;
+    }
+    app.get(`${LOCAL_CONSOLE_API_BASE}/health`, () => ({
+        status: "ready",
+        protocol_version: 2,
+        ...(options.runtime === undefined
+            ? {}
+            : {
+                instance_id: options.runtime.instanceId,
+                version: options.runtime.version,
+                pid: options.runtime.pid,
+            }),
+    }));
+    app.get(`${LOCAL_CONSOLE_API_BASE}/control/status`, (request) => {
+        requireControl(request);
+        return {
+            status: "running",
+            protocol_version: 2,
+            ...(options.runtime === undefined
+                ? {}
+                : {
+                    instance_id: options.runtime.instanceId,
+                    version: options.runtime.version,
+                    entrypoint: options.runtime.entrypoint,
+                    started_at: options.runtime.startedAt,
+                    pid: options.runtime.pid,
+                }),
+        };
+    });
+    app.post(`${LOCAL_CONSOLE_API_BASE}/control/shutdown`, (request) => {
+        requireControl(request);
+        setImmediate(() => options.onShutdown?.());
+        return { status: "stopping" };
+    });
+    app.post(`${LOCAL_CONSOLE_API_BASE}/access-tokens`, {
+        schema: {
+            body: {
+                type: "object",
+                required: ["current_directory"],
+                additionalProperties: false,
+                properties: {
+                    current_directory: { type: "string", minLength: 1, maxLength: 4096 },
+                    environment: {
+                        type: "object",
+                        additionalProperties: false,
+                        properties: Object.fromEntries(LOCAL_CONSOLE_INVOCATION_ENV_KEYS.map((key) => [
+                            key,
+                            { type: "string", minLength: 1, maxLength: 4096 },
+                        ])),
+                    },
+                },
+            },
+        },
+    }, (request) => {
+        requireControl(request);
+        const access = sessions.issueAccessToken({
+            currentDirectory: resolve(request.body.current_directory),
+            environment: request.body.environment ?? {},
+        });
+        return { access_token: access.token, expires_at: access.expires_at };
+    });
+    app.post(`${LOCAL_CONSOLE_API_BASE}/session`, {
+        schema: {
+            body: {
+                type: "object",
+                required: ["access_token"],
+                additionalProperties: false,
+                properties: { access_token: { type: "string", minLength: 1 } },
+            },
+        },
+    }, (request, reply) => {
+        requireSameOrigin(request);
+        const cookie = parseCookieHeader(headerValue(request.headers.cookie));
+        const session = sessions.exchangeAccessToken(request.body.access_token, cookie[LOCAL_CONSOLE_SESSION_COOKIE]);
+        if (session === null) {
+            throw new LocalConsoleHttpError(401, "access_token_invalid", "This Local Console access link has expired. Run `tutti` again.");
+        }
+        if (session.sessionToken !== undefined) {
+            void reply.header("set-cookie", localConsoleSessionCookie(session.sessionToken, session.expires_at));
+        }
+        options.onActivity?.();
+        return {
+            csrf_token: session.csrfToken,
+            context_token: session.contextToken,
+            expires_at: session.expires_at,
+        };
+    });
+    app.get(`${LOCAL_CONSOLE_API_BASE}/bootstrap`, (request) => {
+        const session = requireSession(request);
+        return {
+            csrf_token: session.csrfToken,
+            current_directory: session.context.currentDirectory,
+            platform: process.platform,
+            folder_picker: detectLocalFolderPicker(process.platform, session.context.environment).kind,
+        };
+    });
+    app.get(`${LOCAL_CONSOLE_API_BASE}/projects`, async (request) => {
+        const session = requireSession(request);
+        return { projects: await projects.listProjects(session.context) };
+    });
+    app.get(`${LOCAL_CONSOLE_API_BASE}/heartbeat`, (request) => {
+        requireSession(request);
+        return { status: "ok" };
+    });
+    app.post(`${LOCAL_CONSOLE_API_BASE}/folders/pick`, async (request) => {
+        const session = requireSession(request, true);
+        return await pickLocalFolder({ env: session.context.environment });
+    });
+    app.post(`${LOCAL_CONSOLE_API_BASE}/providers/models`, {
+        schema: {
+            body: {
+                type: "object",
+                required: ["base_url", "api_key"],
+                additionalProperties: false,
+                properties: {
+                    base_url: { type: "string", minLength: 1, maxLength: 2048 },
+                    api_key: { type: "string", minLength: 1, maxLength: 4096 },
+                },
+            },
+        },
+    }, async (request) => {
+        requireSession(request, true);
+        return await projects.discoverModels({
+            baseUrl: request.body.base_url,
+            apiKey: request.body.api_key,
+        });
+    });
+    app.post(`${LOCAL_CONSOLE_API_BASE}/projects/launch`, {
+        schema: {
+            body: {
+                type: "object",
+                required: ["workspace_path"],
+                additionalProperties: false,
+                properties: {
+                    workspace_path: { type: "string", minLength: 1, maxLength: 4096 },
+                    provider: {
+                        type: "object",
+                        required: ["base_url", "api_key", "model"],
+                        additionalProperties: false,
+                        properties: {
+                            base_url: { type: "string", minLength: 1, maxLength: 2048 },
+                            api_key: { type: "string", minLength: 1, maxLength: 4096 },
+                            model: { type: "string", minLength: 1, maxLength: 240 },
+                        },
+                    },
+                },
+            },
+        },
+    }, async (request) => {
+        const session = requireSession(request, true);
+        return await projects.launchProject({
+            workspacePath: request.body.workspace_path,
+            ...(request.body.provider === undefined ? {} : { provider: request.body.provider }),
+        }, session.context);
+    });
+    app.post(`${LOCAL_CONSOLE_API_BASE}/projects/:projectId/invite`, async (request) => {
+        const session = requireSession(request, true);
+        return await projects.refreshInvite(request.params.projectId, session.context);
+    });
+    app.post(`${LOCAL_CONSOLE_API_BASE}/projects/:projectId/stop`, async (request) => {
+        const session = requireSession(request, true);
+        return await projects.stopProject(request.params.projectId, session.context);
+    });
+    const webStaticRoot = options.webStaticRoot === false
+        ? undefined
+        : (options.webStaticRoot ?? resolvePackagedWebStaticRoot(options.env));
+    if (webStaticRoot !== undefined) {
+        registerHostWebStaticRoutes(app, { root: webStaticRoot });
+    }
+    return app;
+}
+function listeningPort(app) {
+    const address = app.server.address();
+    if (typeof address !== "object" || address === null) {
+        throw new Error("Local Console did not expose a loopback port.");
+    }
+    return address.port;
+}
+function entrypointIdentity(path) {
+    try {
+        const stats = statSync(path);
+        return `${stats.dev}:${stats.ino}:${stats.size}:${stats.mtimeMs}`;
+    }
+    catch {
+        return null;
+    }
+}
+export async function runLocalConsoleProcess(options = {}) {
+    const cwd = resolve(options.cwd ?? process.cwd());
+    const env = options.env ?? process.env;
+    const tuttiHome = resolveTuttiHome(env.TUTTI_HOME, cwd);
+    const serviceEnvironment = createLocalConsoleServiceEnvironment({ env, tuttiHome });
+    const controlToken = createLocalConsoleSecret();
+    const instanceId = createLocalConsoleSecret();
+    const now = options.now ?? (() => new Date());
+    const startedAt = now().toISOString();
+    const version = readCliVersion();
+    const entrypointArgument = process.argv[1];
+    if (entrypointArgument === undefined || entrypointArgument.trim() === "") {
+        throw new Error("Cannot locate the Tutti CLI entrypoint.");
+    }
+    const entrypoint = resolve(entrypointArgument);
+    const initialEntrypointIdentity = entrypointIdentity(entrypoint);
+    if (initialEntrypointIdentity === null) {
+        throw new Error("The Tutti CLI entrypoint is unavailable.");
+    }
+    let lastActivityAt = now().getTime();
+    let requestClose = () => undefined;
+    const app = createLocalConsoleServer({
+        controlToken,
+        cwd,
+        tuttiHome,
+        env: serviceEnvironment,
+        runtime: {
+            instanceId,
+            version,
+            entrypoint,
+            startedAt,
+            pid: process.pid,
+        },
+        onActivity: () => {
+            lastActivityAt = now().getTime();
+        },
+        onShutdown: () => requestClose(),
+        ...(options.now === undefined ? {} : { now: options.now }),
+    });
+    await app.listen({ host: "127.0.0.1", port: 0 });
+    writeLocalConsoleRuntimeEndpoint({
+        tuttiHome,
+        instanceId,
+        pid: process.pid,
+        baseUrl: `http://127.0.0.1:${listeningPort(app)}`,
+        controlToken,
+        version,
+        entrypoint,
+        now,
+    });
+    let closing = false;
+    const close = async () => {
+        if (closing) {
+            return;
+        }
+        closing = true;
+        deleteLocalConsoleRuntimeEndpoint({
+            tuttiHome,
+            expectedControlToken: controlToken,
+        });
+        const forceClose = setTimeout(() => app.server.closeAllConnections(), 5_000);
+        forceClose.unref();
+        try {
+            await app.close();
+        }
+        finally {
+            clearTimeout(forceClose);
+        }
+    };
+    requestClose = () => void close();
+    const idleTimeoutMs = options.idleTimeoutMs ?? 60 * 60 * 1_000;
+    const idleCheck = setInterval(() => {
+        let installedVersion = null;
+        try {
+            installedVersion = readCliVersion();
+        }
+        catch {
+            // Package removal is handled as a runtime identity change.
+        }
+        if (!existsSync(entrypoint) ||
+            entrypointIdentity(entrypoint) !== initialEntrypointIdentity ||
+            installedVersion !== version) {
+            void close();
+            return;
+        }
+        if (now().getTime() - lastActivityAt >= idleTimeoutMs) {
+            void close();
+        }
+    }, Math.min(60_000, Math.max(1_000, Math.floor(idleTimeoutMs / 4))));
+    idleCheck.unref();
+    process.once("SIGINT", () => void close());
+    process.once("SIGTERM", () => void close());
+    await new Promise((resolveClosed) => {
+        app.server.once("close", resolveClosed);
+    });
+    clearInterval(idleCheck);
+}
+//# sourceMappingURL=server.js.map

package/dist/server-shell/local-console/session.d.ts

@@ -0,0 +1,28 @@
+import type { LocalConsoleInvocationContext } from "./invocation-context.js";
+export declare const LOCAL_CONSOLE_SESSION_COOKIE = "tutti_local_console_session";
+export type IssuedLocalConsoleAccessToken = {
+    token: string;
+    expires_at: string;
+};
+export type ExchangedLocalConsoleSession = {
+    sessionToken?: string;
+    contextToken: string;
+    csrfToken: string;
+    expires_at: string;
+};
+export type ReadLocalConsoleSession = {
+    csrfToken: string;
+    context: LocalConsoleInvocationContext;
+};
+export declare class LocalConsoleSessionRegistry {
+    #private;
+    constructor(options?: {
+        now?: () => Date;
+    });
+    issueAccessToken(context: LocalConsoleInvocationContext): IssuedLocalConsoleAccessToken;
+    exchangeAccessToken(token: string, existingSessionToken?: string): ExchangedLocalConsoleSession | null;
+    readSession(token: string | undefined, contextToken?: string): ReadLocalConsoleSession | null;
+}
+export declare function parseCookieHeader(header: string | undefined): Record<string, string>;
+export declare function localConsoleSessionCookie(token: string, expiresAt: string): string;
+//# sourceMappingURL=session.d.ts.map

package/dist/server-shell/local-console/session.js

@@ -0,0 +1,168 @@
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+export const LOCAL_CONSOLE_SESSION_COOKIE = "tutti_local_console_session";
+const ACCESS_TOKEN_TTL_MS = 60_000;
+const SESSION_TTL_MS = 12 * 60 * 60 * 1_000;
+function createSecret() {
+    return randomBytes(32).toString("base64url");
+}
+function hashSecret(value) {
+    return createHash("sha256").update(value).digest("base64url");
+}
+function secretEquals(value, expectedHash) {
+    const actual = Buffer.from(hashSecret(value));
+    const expected = Buffer.from(expectedHash);
+    return actual.length === expected.length && timingSafeEqual(actual, expected);
+}
+export class LocalConsoleSessionRegistry {
+    #accessTokens = new Map();
+    #sessions = new Map();
+    #contexts = new Map();
+    #now;
+    #browserSessionToken;
+    constructor(options = {}) {
+        this.#now = options.now ?? (() => new Date());
+    }
+    issueAccessToken(context) {
+        this.#purgeExpired();
+        const token = createSecret();
+        const expiresAt = this.#now().getTime() + ACCESS_TOKEN_TTL_MS;
+        this.#accessTokens.set(hashSecret(token), {
+            hash: hashSecret(token),
+            expiresAt,
+            context,
+        });
+        return { token, expires_at: new Date(expiresAt).toISOString() };
+    }
+    exchangeAccessToken(token, existingSessionToken) {
+        this.#purgeExpired();
+        const accessTokenHash = hashSecret(token);
+        const accessToken = this.#accessTokens.get(accessTokenHash);
+        if (accessToken === undefined ||
+            accessToken.expiresAt <= this.#now().getTime() ||
+            !secretEquals(token, accessToken.hash)) {
+            return null;
+        }
+        this.#accessTokens.delete(accessTokenHash);
+        let sessionToken;
+        let sessionHash = "";
+        let session;
+        if (existingSessionToken !== undefined) {
+            sessionHash = hashSecret(existingSessionToken);
+            const existingSession = this.#sessions.get(sessionHash);
+            if (existingSession !== undefined &&
+                existingSession.expiresAt > this.#now().getTime() &&
+                secretEquals(existingSessionToken, existingSession.hash)) {
+                session = existingSession;
+            }
+        }
+        if (session === undefined && this.#browserSessionToken !== undefined) {
+            const sharedSessionHash = hashSecret(this.#browserSessionToken);
+            const sharedSession = this.#sessions.get(sharedSessionHash);
+            if (sharedSession !== undefined &&
+                sharedSession.expiresAt > this.#now().getTime() &&
+                secretEquals(this.#browserSessionToken, sharedSession.hash)) {
+                sessionToken = this.#browserSessionToken;
+                sessionHash = sharedSessionHash;
+                session = sharedSession;
+            }
+        }
+        if (session === undefined) {
+            sessionToken = createSecret();
+            this.#browserSessionToken = sessionToken;
+            sessionHash = hashSecret(sessionToken);
+            session = {
+                hash: sessionHash,
+                csrfToken: createSecret(),
+                expiresAt: this.#now().getTime() + SESSION_TTL_MS,
+                defaultContextHash: "",
+            };
+            this.#sessions.set(sessionHash, session);
+        }
+        const contextToken = createSecret();
+        const contextHash = hashSecret(contextToken);
+        session.defaultContextHash = contextHash;
+        this.#contexts.set(contextHash, {
+            hash: contextHash,
+            expiresAt: session.expiresAt,
+            sessionHash,
+            context: accessToken.context,
+        });
+        return {
+            ...(sessionToken === undefined ? {} : { sessionToken }),
+            contextToken,
+            csrfToken: session.csrfToken,
+            expires_at: new Date(session.expiresAt).toISOString(),
+        };
+    }
+    readSession(token, contextToken) {
+        this.#purgeExpired();
+        if (token === undefined || token.trim() === "") {
+            return null;
+        }
+        const session = this.#sessions.get(hashSecret(token));
+        if (session === undefined ||
+            session.expiresAt <= this.#now().getTime() ||
+            !secretEquals(token, session.hash)) {
+            return null;
+        }
+        const contextHash = contextToken === undefined ? session.defaultContextHash : hashSecret(contextToken);
+        const context = this.#contexts.get(contextHash);
+        if (context === undefined ||
+            context.sessionHash !== hashSecret(token) ||
+            context.expiresAt <= this.#now().getTime() ||
+            (contextToken !== undefined && !secretEquals(contextToken, context.hash))) {
+            return null;
+        }
+        return { csrfToken: session.csrfToken, context: context.context };
+    }
+    #purgeExpired() {
+        const now = this.#now().getTime();
+        for (const [key, value] of this.#accessTokens) {
+            if (value.expiresAt <= now) {
+                this.#accessTokens.delete(key);
+            }
+        }
+        for (const [key, value] of this.#sessions) {
+            if (value.expiresAt <= now) {
+                this.#sessions.delete(key);
+            }
+        }
+        if (this.#browserSessionToken !== undefined &&
+            !this.#sessions.has(hashSecret(this.#browserSessionToken))) {
+            this.#browserSessionToken = undefined;
+        }
+        for (const [key, value] of this.#contexts) {
+            if (value.expiresAt <= now || !this.#sessions.has(value.sessionHash)) {
+                this.#contexts.delete(key);
+            }
+        }
+    }
+}
+export function parseCookieHeader(header) {
+    if (header === undefined) {
+        return {};
+    }
+    const cookies = {};
+    for (const part of header.split(";")) {
+        const separator = part.indexOf("=");
+        if (separator <= 0) {
+            continue;
+        }
+        const name = part.slice(0, separator).trim();
+        const value = part.slice(separator + 1).trim();
+        if (name !== "") {
+            cookies[name] = value;
+        }
+    }
+    return cookies;
+}
+export function localConsoleSessionCookie(token, expiresAt) {
+    return [
+        `${LOCAL_CONSOLE_SESSION_COOKIE}=${token}`,
+        "Path=/",
+        "HttpOnly",
+        "SameSite=Strict",
+        `Expires=${new Date(expiresAt).toUTCString()}`,
+    ].join("; ");
+}
+//# sourceMappingURL=session.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xfey/tutti",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",