npm - @xopcai/xopc - Versions diffs - 0.0.200 → 0.0.202 - Mend

@xopcai/xopc 0.0.200 → 0.0.202

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (99) hide show

package/dist/src/auth/oauth/xopc-cloud.js CHANGED Viewed

@@ -41,9 +41,10 @@ function escapeHtml(value) {
 		"'": "&#39;"
 	})[character] ?? character);
 }
-function callbackHtml(title, message, tone) {
+function callbackHtml(title, message, tone, returnToAppUrl) {
 	const safeTitle = escapeHtml(title);
 	const safeMessage = escapeHtml(message);
+	const safeReturnToAppUrl = returnToAppUrl?.startsWith("xopc://") ? escapeHtml(returnToAppUrl) : void 0;
 	return `<!doctype html>
 <html lang="en">
 <head>
@@ -134,6 +135,20 @@ function callbackHtml(title, message, tone) {
       line-height: 1.55;
     }
     .window-icon { flex: none; width: 18px; height: 18px; margin-top: 1px; color: var(--accent); fill: none; stroke: currentColor; stroke-width: 1.8; stroke-linecap: round; stroke-linejoin: round; }
+    .return-button {
+      display: inline-flex;
+      align-items: center;
+      justify-content: center;
+      margin-top: 22px;
+      min-height: 42px;
+      border-radius: 12px;
+      padding: 0 16px;
+      background: var(--accent);
+      color: #fff;
+      font-size: 14px;
+      font-weight: 650;
+      text-decoration: none;
+    }
     @media (prefers-color-scheme: dark) {
       :root {
         --accent-soft: rgba(58, 107, 255, 0.16);
@@ -183,11 +198,18 @@ function callbackHtml(title, message, tone) {
     </div>
     <h1>${safeTitle}</h1>
     <p class="message">${safeMessage}</p>
+    ${safeReturnToAppUrl ? `<a id="return-to-xopc" class="return-button" href="${safeReturnToAppUrl}">Open XOPC</a>` : ""}
     <div class="next-step">
       <svg class="window-icon" viewBox="0 0 24 24" aria-hidden="true"><rect x="3" y="5" width="18" height="14" rx="2" /><path d="M3 9h18" /></svg>
       <span>You can safely close this window and return to XOPC.</span>
     </div>
   </main>
+  ${safeReturnToAppUrl ? `<script>
+    window.setTimeout(function () {
+      var link = document.getElementById('return-to-xopc');
+      if (link) window.location.href = link.href;
+    }, 350);
+  <\/script>` : ""}
 </body>
 </html>`;
 }
@@ -226,7 +248,7 @@ async function loginWithBrowser(callbacks) {
 				return;
 			}
 			response.statusCode = 200;
-			response.end(callbackHtml("Authorization complete", "XOPC received the authorization callback successfully.", "success"));
+			response.end(callbackHtml("Authorization complete", "XOPC received the authorization callback successfully.", "success", callbacks.returnToAppUrl));
 			settle?.({ code });
 		} catch {
 			const error = /* @__PURE__ */ new Error("XOPC OAuth callback could not be processed");

package/dist/src/gateway/heartbeat/service.js CHANGED Viewed

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/oauth-async.d.ts CHANGED Viewed

@@ -9,6 +9,7 @@ import { Hono } from 'hono';
 import type { GatewayService } from '../service.js';
 import { type OAuthCredentials } from '../../auth/oauth/types.js';
 export declare function refreshModelCatalogAfterOAuth(provider: string, service: Pick<GatewayService, 'getModelCatalogSync'>): Promise<void>;
+export declare function normalizeDesktopOAuthReturnPath(value: unknown): string | undefined;
 export declare function resolveOAuthLoginMethodPreference(params: {
     requestedMethod?: unknown;
     supportedMethods?: readonly string[];

package/dist/src/gateway/hono/oauth-async.js CHANGED Viewed

@@ -53,6 +53,18 @@ setInterval(() => {
 function generateSessionId() {
 	return `oauth_${Date.now()}_${Math.random().toString(36).substring(2, 15)}`;
 }
+function normalizeDesktopOAuthReturnPath(value) {
+	if (typeof value !== "string") return void 0;
+	const path = value.trim();
+	if (path.length === 0 || path.length > 2048 || !path.startsWith("/") || path.startsWith("//") || path.includes("\\") || /[\u0000-\u001f\u007f]/.test(path)) return;
+	return path;
+}
+function desktopOAuthReturnUrl(sessionId, returnPath) {
+	const params = new URLSearchParams({ request_id: sessionId });
+	const normalizedReturnPath = normalizeDesktopOAuthReturnPath(returnPath);
+	if (normalizedReturnPath) params.set("return_path", normalizedReturnPath);
+	return `xopc://cloud/model-connected?${params.toString()}`;
+}
 function cancelOAuthSession(session, message = "OAuth flow cancelled") {
 	if (session.abortController) session.abortController.abort();
 	if (session.manualCodeResolve) session.manualCodeResolve("");
@@ -110,6 +122,7 @@ function createOAuthAsyncHandler(service) {
 		const session = {
 			id: sessionId,
 			provider,
+			...body.client === "desktop" && provider === "xopc-cloud" ? { returnToAppUrl: desktopOAuthReturnUrl(sessionId, body.returnPath) } : {},
 			preferredLoginMethod: preferredOAuthLoginMethod({
 				provider,
 				requestedMethod: body.loginMethod,
@@ -283,6 +296,7 @@ async function runOAuthFlow(session, oauthProvider, service) {
 			}, "Selected OAuth auth method");
 			return selectedOption.id;
 		},
+		returnToAppUrl: session.returnToAppUrl,
 		signal: abortController.signal
 	};
 	try {
@@ -328,4 +342,4 @@ function deleteOAuthCredentialsFromCache(provider) {
 	oauthCredentialsCache.delete(provider);
 }
 //#endregion
-export { createOAuthAsyncHandler, deleteOAuthCredentialsFromCache, getOAuthCredentialsFromCache, refreshModelCatalogAfterOAuth, resolveOAuthLoginMethodPreference, setOAuthCredentialsToCache };
+export { createOAuthAsyncHandler, deleteOAuthCredentialsFromCache, getOAuthCredentialsFromCache, normalizeDesktopOAuthReturnPath, refreshModelCatalogAfterOAuth, resolveOAuthLoginMethodPreference, setOAuthCredentialsToCache };

package/dist/src/heartbeat/index.js CHANGED Viewed

@@ -1,6 +1,6 @@
 import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
+import { appendCronEventLines } from "./event-prompt.js";
 import { isWithinActiveHours } from "./active-hours.js";
 import { isHeartbeatContentEmpty } from "./content-check.js";
-import { appendCronEventLines } from "./event-prompt.js";
 import { createHeartbeatWake } from "./wake.js";
 export { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, appendCronEventLines, createHeartbeatWake, isHeartbeatContentEmpty, isWithinActiveHours, shouldSilence, stripHeartbeatToken };

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.200",
+  "version": "0.0.202",
   "description": "Local-first AI system that remembers context, coordinates AI, and sustains long-term progress.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -162,10 +162,10 @@
     "vitepress": "^1.6.4",
     "vitest": "4.1.5",
     "vue": "^3.5.35",
-    "@xopcai/endpoint-tools-protocol": "0.0.0",
-    "@xopcai/realtime-protocol": "0.0.0",
+    "@xopcai/gateway-contract": "0.0.0",
     "@xopcai/realtime-client": "0.0.0",
-    "@xopcai/gateway-contract": "0.0.0"
+    "@xopcai/realtime-protocol": "0.0.0",
+    "@xopcai/endpoint-tools-protocol": "0.0.0"
   },
   "scripts": {
     "assets:brand": "node scripts/generate-brand-assets.mjs",

package/dist/gateway/static/root/assets/channels-status-swr-B4Rbh3bM.js DELETED Viewed

	@@ -1 +0,0 @@
1	- import{r as e}from"./locale-store-xULEcFVs.js";import{n as t}from"./channel-recipient-api-D-9qiuio.js";function n(){return e(`/api/channels/status`)}var r=t;export{r as n,n as t};