apexrest 0.4.0-beta.1

package/dist/resources/ords/OrdsBridge.java

@@ -0,0 +1,323 @@
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import java.io.*;
+import java.net.URI;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.*;
+import java.sql.*;
+import java.util.*;
+import java.util.logging.*;
+import java.util.regex.*;
+import java.util.zip.*;
+import javax.sql.rowset.serial.SerialClob;
+import oracle.dbtools.extension.apex.core.apexlang.APEXLangTranspiler;
+import oracle.dbtools.extension.apex.core.apexlang.APEXLangDeploymentFile;
+import oracle.dbtools.extension.apex.core.apexlang.APEXSessionProperty;
+import oracle.dbtools.extension.apex.utility.APEXLangUtils;
+import oracle.apexlang.APEXLangCompiler;
+import oracle.apexlang.core.DeploymentValue;
+
+/** Runs against the Oracle compiler and OREST driver distributed with SQLcl 26.1+.
+ * Credentials arrive only on stdin. Jobs and reports must never contain passwords.
+ * This is an internal bridge, not a replacement APEXlang compiler.
+ */
+public class OrdsBridge {
+    static final ObjectMapper JSON = new ObjectMapper();
+    static final long MAX_BYTES = 512L * 1024 * 1024;
+    static final String IMPORT_BLOCK = """
+        begin
+          for b in (select ordinal, source from json_table(?, '$[*]'
+              columns (ordinal for ordinality, source clob path '$' error on error))
+              order by ordinal) loop
+            execute immediate b.source;
+          end loop;
+        end;
+        """;
+    static String password = "";
+
+    public static void main(String[] args) throws Exception {
+        ObjectNode result = JSON.createObjectNode();
+        Path report = null;
+        int exit = 0;
+        try {
+            if (args.length != 1) throw new IllegalArgumentException("Expected one job file path");
+            JsonNode job = JSON.readTree(Files.readString(Path.of(args[0])));
+            report = Path.of(required(job, "output")).toAbsolutePath().normalize();
+            String operation = required(job, "operation");
+            result.put("operation", operation);
+            if (operation.equals("compile")) {
+                List<String> blocks = compile(job, result);
+                result.put("statement", IMPORT_BLOCK);
+                result.set("blocks", JSON.valueToTree(blocks));
+            } else if (operation.equals("prepare-script")) {
+                result.put("script", script(job));
+            } else {
+                JsonNode credentials;
+                try { credentials = JSON.readTree(System.in); }
+                catch (IOException error) { throw new IllegalArgumentException("Invalid credentials JSON on stdin"); }
+                password = required(credentials, "password");
+                try (Connection connection = connect(credentials)) {
+                    if (operation.equals("import")) {
+                        List<String> blocks = compile(job, result);
+                        if (!result.path("targetConfigured").asBoolean())
+                            throw new IllegalArgumentException("Import requires workspace, parsingSchema and applicationId");
+                        try (CallableStatement statement = connection.prepareCall(IMPORT_BLOCK)) {
+                            statement.setClob(1, new SerialClob(JSON.writeValueAsString(blocks).toCharArray()));
+                            result.put("writeStarted", true);
+                            checkpoint(report, result);
+                            statement.execute();
+                        }
+                        result.put("message", "Import successful");
+                    } else if (operation.equals("export")) {
+                        export(connection, job, result);
+                    } else if (operation.equals("script")) {
+                        String source = script(job);
+                        result.put("writeStarted", true);
+                        checkpoint(report, result);
+                        executeScript(connection, source, result);
+                    } else throw new IllegalArgumentException("Unsupported operation");
+                }
+            }
+            result.put("status", "succeeded");
+        } catch (Exception error) {
+            exit = 1;
+            result.put("status", "failed");
+            result.put("code", "ORDS_BRIDGE_FAILED");
+            String message = error.getMessage() == null ? error.getClass().getSimpleName() : error.getMessage();
+            result.put("message", password.isEmpty() ? message : message.replace(password, "[REDACTED]"));
+        }
+        if (report != null) {
+            Files.createDirectories(report.getParent());
+            Files.writeString(report, JSON.writerWithDefaultPrettyPrinter().writeValueAsString(result) + "\n");
+        }
+        // No source, query results, URL, or credential values are printed to the process log.
+        System.out.println(exit == 0 ? "APEXREST_ORDS_COMPLETE" : "APEXREST_ORDS_FAILED");
+        if (exit != 0) System.exit(exit);
+    }
+
+    static String required(JsonNode node, String key) {
+        if (node == null || !node.path(key).isTextual() || node.path(key).asText().isBlank())
+            throw new IllegalArgumentException("Missing " + key);
+        return node.path(key).asText();
+    }
+
+    static void checkpoint(Path report, ObjectNode result) throws IOException {
+        ObjectNode pending = result.deepCopy();
+        pending.put("status", "failed");
+        pending.put("code", "ORDS_OUTCOME_UNKNOWN");
+        pending.put("message", "The ORDS write started but no final result was recorded");
+        Files.createDirectories(report.getParent());
+        Files.writeString(report, JSON.writeValueAsString(pending) + "\n");
+    }
+
+    static Connection connect(JsonNode credentials) throws Exception {
+        URI uri = URI.create(required(credentials, "url"));
+        if (!("https".equals(uri.getScheme()) || "http".equals(uri.getScheme())) || uri.getHost() == null
+                || uri.getUserInfo() != null || uri.getQuery() != null || uri.getFragment() != null)
+            throw new IllegalArgumentException("Invalid ORDS schema URL");
+        String url = uri.toString();
+        if (url.matches(".*/_/sql/?$")) throw new IllegalArgumentException("Use the ORDS schema URL, without /_/sql");
+        if (!url.endsWith("/")) url += "/";
+        Properties properties = new Properties();
+        properties.setProperty("user", required(credentials, "username"));
+        properties.setProperty("password", password);
+        Logger.getLogger("oracle.dbtools").setLevel(Level.WARNING);
+        Connection connection = new oracle.dbtools.jdbc.orest.Driver().connect("jdbc:oracle:orest:@" + url, properties);
+        if (connection == null) throw new SQLException("The SQLcl OREST driver rejected the URL");
+        return connection;
+    }
+
+    static List<String> compile(JsonNode job, ObjectNode result) throws Exception {
+        Path input = Path.of(required(job, "input")).toRealPath();
+        Path deployment = Path.of(required(job, "deployment")).toRealPath();
+        if (!Files.isDirectory(input)) throw new IllegalArgumentException("The bridge requires a staged APEXlang directory");
+        Path metadata = input.resolve(".apex/apexlang.json");
+        String version = required(JSON.readTree(Files.readString(metadata)), "mmdVersion");
+        APEXLangTranspiler transpiler = new APEXLangTranspiler(version);
+        Map<String, DeploymentValue> values = new HashMap<>();
+        APEXLangUtils.populateDeploymentInfo(values, List.of("subscription.masterApps", "subscription.mode"),
+            APEXSessionProperty.getAPEXSessionProperties(APEXLangCompiler.getInstance(version).getDeploymentFileProperties()),
+            new APEXLangDeploymentFile(deployment), null, null, null);
+        var compilation = transpiler.transpile(input, values);
+        result.put("compilerMmdVersion", transpiler.getCompilerMmdVersion());
+        if (compilation.getWarnings() != null && compilation.getWarnings().length > 0)
+            result.put("warnings", transpiler.formatWarnings(compilation.getWarnings()));
+        if (compilation.getErrors().length > 0)
+            throw new IllegalArgumentException(transpiler.formatErrors(compilation.getErrors()));
+        List<String> blocks = new ArrayList<>();
+        JsonNode configuration = JSON.readTree(Files.readString(deployment));
+        long applicationId = job.path("applicationId").asLong(configuration.path("app").path("id").asLong(0));
+        String workspace = job.path("workspace").asText(configuration.path("workspace").path("name").asText(""));
+        String schema = job.path("parsingSchema").asText(configuration.path("app").path("databaseSession").path("parsingSchema").asText(""));
+        if (applicationId > 0 && !workspace.isBlank() && !schema.isBlank()) {
+            blocks.add("begin apex_application_install.clear_all; apex_application_install.set_workspace(" + literal(workspace)
+                + "); apex_application_install.set_application_id(" + applicationId + "); apex_application_install.set_schema("
+                + literal(schema) + "); end;");
+            result.put("targetConfigured", true);
+        }
+        compilation.processPlSqlOutput(blocks::add);
+        if (blocks.isEmpty()) throw new IllegalArgumentException("Oracle compiler produced no import blocks");
+        long size = blocks.stream().mapToLong(s -> s.getBytes(StandardCharsets.UTF_8).length).sum();
+        if (size > MAX_BYTES) throw new IllegalArgumentException("Compiled import exceeds the bridge payload limit");
+        result.put("blockCount", blocks.size());
+        result.put("compiledBytes", size);
+        result.put("databaseRequests", 1);
+        return blocks;
+    }
+
+    static String literal(String value) { return "'" + value.replace("'", "''") + "'"; }
+
+    static void export(Connection connection, JsonNode job, ObjectNode result) throws Exception {
+        long applicationId = job.path("applicationId").asLong(0);
+        if (applicationId <= 0) throw new IllegalArgumentException("Invalid applicationId");
+        String format = required(job, "exportType");
+        if (format.equals("APPLICATION_SOURCE")) format = "SQL";
+        if (!Set.of("APEXLANG", "SQL").contains(format)) throw new IllegalArgumentException("Unsupported exportType");
+        String sql = """
+            declare
+              l_files apex_t_export_files;
+              l_zip blob;
+            begin
+              l_files := apex_export.get_application(
+                p_application_id => ?, p_type => ?, p_split => ? = 1,
+                p_with_date => false, p_with_original_ids => true,
+                p_with_comments => true, p_with_supporting_objects => 'Y');
+              l_zip := apex_export.zip(l_files);
+              ? := apex_web_service.blob2clobbase64(l_zip, p_newlines => 'N', p_padding => 'Y');
+            end;
+            """;
+        String encoded;
+        try (CallableStatement statement = connection.prepareCall(sql)) {
+            statement.setLong(1, applicationId);
+            statement.setString(2, format);
+            statement.setInt(3, job.path("split").asBoolean(true) ? 1 : 0);
+            statement.registerOutParameter(4, Types.CLOB);
+            statement.execute();
+            Clob content = statement.getClob(4);
+            if (content == null || content.length() == 0 || content.length() > MAX_BYTES * 2)
+                throw new IOException("Missing or oversized export response");
+            encoded = content.getSubString(1, Math.toIntExact(content.length()));
+        }
+        // SQLcl 26.1's OREST getClob serializes the JSON scalar, including its quotes.
+        // Decode that scalar once; accept raw text if a later driver corrects this behavior.
+        if (encoded.startsWith("\"")) {
+            JsonNode scalar = JSON.readTree(encoded);
+            if (!scalar.isTextual()) throw new IOException("Invalid export CLOB response");
+            encoded = scalar.asText();
+        }
+        Path directory = Path.of(required(job, "outputDirectory")).toAbsolutePath().normalize();
+        List<String> files = extractZip(Base64.getDecoder().decode(encoded.replaceAll("\\s", "")), directory);
+        if (format.equals("APEXLANG") && files.stream().noneMatch(f -> f.endsWith(".apex/apexlang.json")))
+            throw new IOException("APEXlang export lacks Oracle .apex/apexlang.json metadata");
+        result.set("files", JSON.valueToTree(files));
+        result.put("outputDirectory", directory.toString());
+        result.put("message", "Export successful");
+    }
+
+    static List<String> extractZip(byte[] archive, Path directory) throws Exception {
+        if (Files.exists(directory)) {
+            if (Files.isSymbolicLink(directory)) throw new IOException("Export directory cannot be a symbolic link");
+            try (var entries = Files.list(directory)) {
+                if (entries.findAny().isPresent()) throw new IOException("Export directory must be empty");
+            }
+        } else Files.createDirectories(directory);
+        Path root = directory.toRealPath();
+        List<String> files = new ArrayList<>();
+        long total = 0;
+        try (ZipInputStream zip = new ZipInputStream(new ByteArrayInputStream(archive), StandardCharsets.UTF_8)) {
+            ZipEntry entry;
+            while ((entry = zip.getNextEntry()) != null) {
+                String name = entry.getName();
+                Path target = root.resolve(name).normalize();
+                if (name.contains("\\") || !target.startsWith(root) || target.equals(root) || name.startsWith("/"))
+                    throw new IOException("Unsafe export archive path");
+                if (entry.isDirectory()) { Files.createDirectories(target); continue; }
+                Files.createDirectories(target.getParent());
+                try (OutputStream out = Files.newOutputStream(target, StandardOpenOption.CREATE_NEW)) {
+                    byte[] buffer = new byte[65536];
+                    int read;
+                    while ((read = zip.read(buffer)) >= 0) {
+                        total += read;
+                        if (total > MAX_BYTES) throw new IOException("Export archive exceeds the bridge payload limit");
+                        out.write(buffer, 0, read);
+                    }
+                }
+                files.add(name);
+            }
+        }
+        if (files.isEmpty()) throw new IOException("Empty export archive");
+        return files;
+    }
+
+    static String script(JsonNode job) throws Exception {
+        Path input = Path.of(required(job, "input")).toRealPath();
+        return expandScript(input, input.getParent(), new HashSet<>());
+    }
+
+    static String expandScript(Path input, Path root, Set<Path> active) throws Exception {
+        input = input.toRealPath();
+        if (!input.startsWith(root) || !active.add(input)) throw new IOException("Unsafe or cyclic SQL include");
+        StringBuilder output = new StringBuilder();
+        Pattern include = Pattern.compile("^\\s*@@?(?:\"([^\"]+)\"|'([^']+)'|([^\\s]+))\\s*$");
+        for (String line : Files.readAllLines(input, StandardCharsets.UTF_8)) {
+            Matcher match = include.matcher(line);
+            if (match.matches()) {
+                String name = match.group(1) != null ? match.group(1) : match.group(2) != null ? match.group(2) : match.group(3);
+                Path child = input.getParent().resolve(name);
+                if (!Files.exists(child) && !name.endsWith(".sql")) child = input.getParent().resolve(name + ".sql");
+                output.append(expandScript(child, root, active));
+            } else {
+                if (line.stripLeading().startsWith("@")) throw new IOException("Unsupported SQL include syntax");
+                output.append(line).append('\n');
+            }
+            if (output.length() > MAX_BYTES) throw new IOException("SQL script exceeds the bridge payload limit");
+        }
+        active.remove(input);
+        return output.toString();
+    }
+
+    static void executeScript(Connection connection, String sql, ObjectNode result) throws Exception {
+        if (!(connection instanceof oracle.dbtools.jdbc.Connection restConnection))
+            throw new SQLException("Expected the SQLcl REST connection implementation");
+        try (ScriptStatement rest = new ScriptStatement(restConnection)) {
+            try (var response = rest.orestExecuteInternal(sql)) {
+                if (response == null) throw new SQLException("ORDS script produced no HTTP response");
+                if (response.getCode() < 200 || response.getCode() >= 300)
+                    throw new SQLException("ORDS script HTTP status " + response.getCode());
+                JsonNode body = JSON.readTree(response.getEntity().getContent());
+                if (!body.path("items").isArray() || body.path("items").isEmpty())
+                    throw new SQLException("ORDS returned no script execution results");
+                int statements = 0;
+                for (JsonNode item : body.path("items")) {
+                    statements++;
+                    String messages = item.path("response").toString();
+                    if (item.path("errorCode").asInt(0) != 0 || item.hasNonNull("errorDetails") || item.path("result").asInt(0) < 0
+                            || Pattern.compile("(?i)ORA-\\d+|PLS-\\d+|SP2-\\d+|unknown command|error at line").matcher(messages).find())
+                        throw new SQLException("ORDS script failed at statement " + statements + ": " + messages);
+                }
+                result.put("statementCount", statements);
+                result.put("message", "Script execution successful");
+            }
+        }
+    }
+
+    /** The driver's default emulate=jdbc payload is for individual JDBC statements.
+     * Full SQL*Plus scripts use ORDS's documented statementText script format instead.
+     */
+    static class ScriptStatement extends oracle.dbtools.jdbc.Statement {
+        ScriptStatement(oracle.dbtools.jdbc.Connection connection) { super(connection); }
+        @Override protected AbstractMap.SimpleEntry<com.fasterxml.jackson.core.JsonGenerator, Writer>
+                generatePost(String sql, int offset) throws SQLException {
+            try {
+                Writer out = new StringWriter();
+                var generator = JSON.getFactory().createGenerator(out);
+                generator.writeStartObject();
+                generator.writeStringField("statementText", sql);
+                generator.writeEndObject();
+                generator.flush();
+                return new AbstractMap.SimpleEntry<>(generator, out);
+            } catch (IOException error) { throw new SQLException("Could not encode the ORDS script", error); }
+        }
+    }
+}

package/dist/resources/panel/assets/LICENCE.txt

@@ -0,0 +1,118 @@
+All image contents within are Copyright The Pokémon Company.
+
+This repository is distributed under CC0 1.0 Universal
+
+Statement of Purpose
+
+The laws of most jurisdictions throughout the world automatically confer
+exclusive Copyright and Related Rights (defined below) upon the creator and
+subsequent owner(s) (each and all, an "owner") of an original work of
+authorship and/or a database (each, a "Work").
+
+Certain owners wish to permanently relinquish those rights to a Work for the
+purpose of contributing to a commons of creative, cultural and scientific
+works ("Commons") that the public can reliably and without fear of later
+claims of infringement build upon, modify, incorporate in other works, reuse
+and redistribute as freely as possible in any form whatsoever and for any
+purposes, including without limitation commercial purposes. These owners may
+contribute to the Commons to promote the ideal of a free culture and the
+further production of creative, cultural and scientific works, or to gain
+reputation or greater distribution for their Work in part through the use and
+efforts of others.
+
+For these and/or other purposes and motivations, and without any expectation
+of additional consideration or compensation, the person associating CC0 with a
+Work (the "Affirmer"), to the extent that he or she is an owner of Copyright
+and Related Rights in the Work, voluntarily elects to apply CC0 to the Work
+and publicly distribute the Work under its terms, with knowledge of his or her
+Copyright and Related Rights in the Work and the meaning and intended legal
+effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be
+protected by copyright and related or neighboring rights ("Copyright and
+Related Rights"). Copyright and Related Rights include, but are not limited
+to, the following:
+
+  i. the right to reproduce, adapt, distribute, perform, display, communicate,
+  and translate a Work;
+
+  ii. moral rights retained by the original author(s) and/or performer(s);
+
+  iii. publicity and privacy rights pertaining to a person's image or likeness
+  depicted in a Work;
+
+  iv. rights protecting against unfair competition in regards to a Work,
+  subject to the limitations in paragraph 4(a), below;
+
+  v. rights protecting the extraction, dissemination, use and reuse of data in
+  a Work;
+
+  vi. database rights (such as those arising under Directive 96/9/EC of the
+  European Parliament and of the Council of 11 March 1996 on the legal
+  protection of databases, and under any national implementation thereof,
+  including any amended or successor version of such directive); and
+
+  vii. other similar, equivalent or corresponding rights throughout the world
+  based on applicable law or treaty, and any national implementations thereof.
+
+2. Waiver. To the greatest extent permitted by, but not in contravention of,
+applicable law, Affirmer hereby overtly, fully, permanently, irrevocably and
+unconditionally waives, abandons, and surrenders all of Affirmer's Copyright
+and Related Rights and associated claims and causes of action, whether now
+known or unknown (including existing as well as future claims and causes of
+action), in the Work (i) in all territories worldwide, (ii) for the maximum
+duration provided by applicable law or treaty (including future time
+extensions), (iii) in any current or future medium and for any number of
+copies, and (iv) for any purpose whatsoever, including without limitation
+commercial, advertising or promotional purposes (the "Waiver"). Affirmer makes
+the Waiver for the benefit of each member of the public at large and to the
+detriment of Affirmer's heirs and successors, fully intending that such Waiver
+shall not be subject to revocation, rescission, cancellation, termination, or
+any other legal or equitable action to disrupt the quiet enjoyment of the Work
+by the public as contemplated by Affirmer's express Statement of Purpose.
+
+3. Public License Fallback. Should any part of the Waiver for any reason be
+judged legally invalid or ineffective under applicable law, then the Waiver
+shall be preserved to the maximum extent permitted taking into account
+Affirmer's express Statement of Purpose. In addition, to the extent the Waiver
+is so judged Affirmer hereby grants to each affected person a royalty-free,
+non transferable, non sublicensable, non exclusive, irrevocable and
+unconditional license to exercise Affirmer's Copyright and Related Rights in
+the Work (i) in all territories worldwide, (ii) for the maximum duration
+provided by applicable law or treaty (including future time extensions), (iii)
+in any current or future medium and for any number of copies, and (iv) for any
+purpose whatsoever, including without limitation commercial, advertising or
+promotional purposes (the "License"). The License shall be deemed effective as
+of the date CC0 was applied by Affirmer to the Work. Should any part of the
+License for any reason be judged legally invalid or ineffective under
+applicable law, such partial invalidity or ineffectiveness shall not
+invalidate the remainder of the License, and in such case Affirmer hereby
+affirms that he or she will not (i) exercise any of his or her remaining
+Copyright and Related Rights in the Work or (ii) assert any associated claims
+and causes of action with respect to the Work, in either case contrary to
+Affirmer's express Statement of Purpose.
+
+4. Limitations and Disclaimers.
+
+  a. No trademark or patent rights held by Affirmer are waived, abandoned,
+  surrendered, licensed or otherwise affected by this document.
+
+  b. Affirmer offers the Work as-is and makes no representations or warranties
+  of any kind concerning the Work, express, implied, statutory or otherwise,
+  including without limitation warranties of title, merchantability, fitness
+  for a particular purpose, non infringement, or the absence of latent or
+  other defects, accuracy, or the present or absence of errors, whether or not
+  discoverable, all to the greatest extent permissible under applicable law.
+
+  c. Affirmer disclaims responsibility for clearing rights of other persons
+  that may apply to the Work or any use thereof, including without limitation
+  any person's Copyright and Related Rights in the Work. Further, Affirmer
+  disclaims responsibility for obtaining any necessary consents, permissions
+  or other rights required for any use of the Work.
+
+  d. Affirmer understands and acknowledges that Creative Commons is not a
+  party to this document and has no duty or obligation with respect to this
+  CC0 or use of the Work.
+
+For more information, please see
+<http://creativecommons.org/publicdomain/zero/1.0/>

package/dist/resources/panel/assets/sources.json

@@ -0,0 +1,36 @@
+{
+  "repository": "https://github.com/PokeAPI/sprites",
+  "revision": "1dce80ceb372675e9fc7e9f101b71845ef587de2",
+  "assets": [
+    {
+      "name": "mewtwo",
+      "id": 150,
+      "source": "https://raw.githubusercontent.com/PokeAPI/sprites/1dce80ceb372675e9fc7e9f101b71845ef587de2/sprites/pokemon/150.png",
+      "sha256": "31c5aebb134a3711864a92091cb1b5c35158e4e90ca5c88afddf56f0cf4bc129"
+    },
+    {
+      "name": "pikachu",
+      "id": 25,
+      "source": "https://raw.githubusercontent.com/PokeAPI/sprites/1dce80ceb372675e9fc7e9f101b71845ef587de2/sprites/pokemon/25.png",
+      "sha256": "80d30eb1b9f2a05eb4a216d53034e2a0bb16f2619ec43d281f36d601e5819c2c"
+    },
+    {
+      "name": "charmander",
+      "id": 4,
+      "source": "https://raw.githubusercontent.com/PokeAPI/sprites/1dce80ceb372675e9fc7e9f101b71845ef587de2/sprites/pokemon/4.png",
+      "sha256": "4e943ded73aff00aa8323800481412cf0912649d640f5ad5021e8e1e2b3e77c6"
+    },
+    {
+      "name": "bulbasaur",
+      "id": 1,
+      "source": "https://raw.githubusercontent.com/PokeAPI/sprites/1dce80ceb372675e9fc7e9f101b71845ef587de2/sprites/pokemon/1.png",
+      "sha256": "7307265558511ea080add119ab7e86b9f87aaab4cedef76df2a13290ca5ad8c9"
+    },
+    {
+      "name": "squirtle",
+      "id": 7,
+      "source": "https://raw.githubusercontent.com/PokeAPI/sprites/1dce80ceb372675e9fc7e9f101b71845ef587de2/sprites/pokemon/7.png",
+      "sha256": "1309dd0971ab7c5cd1699fa6ead8b00c9d8fa7f39e09313e697b3d31527f0517"
+    }
+  ]
+}

package/dist/resources/panel/index.html

@@ -0,0 +1,68 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+  <title>APEXREST · Development panel</title>
+  <link rel="stylesheet" href="/panel.css">
+  <script src="/panel.js" defer></script>
+</head>
+<body>
+  <aside class="sidebar">
+    <div class="brand"><span class="brand-mark" aria-hidden="true">⌘</span><div>APEXREST<small>CODEX WORKSPACE</small></div></div>
+    <div class="project-label">PROJECT</div><strong id="project-name">Connecting…</strong><div id="project-path" class="subtle path"></div>
+    <nav aria-label="Development views">
+      <button data-view="overview" aria-current="page"><span>◈</span> Overview</button>
+      <button data-view="team"><span>◎</span> Agents</button>
+      <button data-view="operations"><span>↗</span> APEX operations</button>
+      <button data-view="settings"><span>☷</span> Settings</button>
+    </nav>
+    <div class="sidebar-bottom"><span id="connection" class="badge">Connecting</span><p id="updated" class="subtle">Waiting for workspace data</p><button id="refresh" class="quiet">Refresh now</button></div>
+  </aside>
+  <main>
+    <header><div><p class="eyebrow">DEVELOPMENT CONTROL</p><h1 id="view-title">Workspace overview</h1><p id="view-subtitle" class="subtle">Your team, settings and APEX work in one place.</p></div><button id="new-task" class="primary">＋ New task</button></header>
+    <div id="notice" role="status" class="notice" hidden></div>
+    <div id="connection-error" role="alert" class="notice error" hidden></div>
+    <section id="metrics" class="metrics" aria-label="Workspace summary"></section>
+    <section data-page="overview"><div id="overview-live"></div></section>
+    <section data-page="team" hidden>
+      <div class="section-heading"><h2>Development runs</h2><label class="inline-label">Run <select id="team-select" aria-label="Selected run"></select></label></div>
+      <div id="team-live"></div>
+      <form id="message-form" class="card"><h3>Send a task update</h3><label for="message">Clarify the task or pass new information to the active agent</label><textarea id="message" rows="3" maxlength="8000" required placeholder="Include the behavior or acceptance check you want changed…"></textarea><div class="form-footer"><p class="subtle">New input invalidates a completion based on the previous task.</p><button class="primary" type="submit">Send update</button><button id="cancel-team" type="button" class="danger">Stop run</button></div></form>
+    </section>
+    <section data-page="operations" hidden>
+      <div class="card"><div class="section-heading"><div><h2>Run a check</h2><p class="subtle">Use the selected project's existing toolchain and authorization.</p></div></div><div class="actions"><button id="validate">Compile APEX source</button><label>Environment<select id="environment"><option value="">Choose environment</option></select></label><label>Test suite<select id="suite"><option value="unit">Unit</option><option value="sql">SQL</option><option value="api">API</option><option value="e2e">Playwright E2E</option><option value="all">All configured</option></select></label><button id="run-tests">Run checks</button><button id="plan">Prepare deployment plan</button></div><p class="subtle">Application imports keep their existing plan, backup and approval gates. This panel does not grant deployment permission.</p></div>
+      <div id="operations-live"></div>
+    </section>
+    <section data-page="settings" hidden>
+      <div class="two-columns">
+        <form id="sqlcl-form" class="card"><p class="eyebrow">ORACLE CONNECTION</p><h2>Database connectivity</h2><p class="subtle">Saved at plugin level for new APEXREST operations across projects.</p><label>Database network transport<select id="sqlcl-transport"><option value="direct">Direct Oracle listener</option><option value="ords">ORDS HTTP(S)</option></select></label><p id="sqlcl-transport-note" class="subtle"></p><label>SQLcl execution<select id="sqlcl-mode"><option value="cli">SQLcl CLI</option><option value="mcp">Official SQLcl MCP</option></select></label><label>MCP restriction level<select id="sqlcl-level"><option value="4">Level 4 · restricted (default)</option><option value="1">Level 1 · allow SQLcl scripts</option></select></label><button type="submit">Save SQLcl settings</button></form>
+        <form id="preferences-form" class="card"><p class="eyebrow">WORKFLOW</p><h2>Defaults for new work</h2><label>Execution mode<select id="default-execution-mode"><option value="single">Single agent</option><option value="team">Agent team</option></select></label><label>Browser for APEX verification<select id="default-browser-mode"><option value="codex">Codex in-app browser</option><option value="external">External system browser</option></select></label><p class="subtle">The external browser uses your normal browser session for interactive login, including SSO. Automated Playwright suites use separate authentication. The dashboard stays in Codex.</p><label>Developers<select id="default-developers"><option>1</option><option>2</option><option>3</option></select></label><label>Developer permissions<select id="default-sandbox"><option value="workspace-write">Write inside this project</option><option value="read-only">Read only</option></select></label><label>Time limit (seconds)<input id="default-timeout" type="number" min="30" max="3600" required></label><p id="default-workflow-note" class="subtle"></p><button type="submit">Save work defaults</button></form>
+      </div>
+      <form id="connection-form" class="card" autocomplete="off">
+        <p class="eyebrow">PLUGIN CONNECTION SETTINGS</p><h2>Connection references</h2>
+        <p class="subtle">Choose a project's read or deploy connection reference. Its connection settings are shared across projects using that reference.</p>
+        <label>Connection reference<input id="connection-ref" list="connection-refs" maxlength="100" required placeholder="Your read or deploy connection reference"></label><datalist id="connection-refs"></datalist>
+        <p id="connection-mode-note" class="subtle"></p>
+        <fieldset id="connection-direct-group" class="connection-group">
+          <legend>Direct Oracle listener</legend>
+          <p class="subtle">Choose a connection from your local SQLcl connection store. SQLcl manages its database credentials.</p>
+          <div class="connection-picker"><label>Saved SQLcl connection<select id="connection-direct"><option value="">Choose a saved connection</option></select></label><button id="saved-connections-refresh" type="button" class="quiet">Load saved connections</button></div>
+          <p id="saved-connections-status" class="subtle" role="status" aria-live="polite" data-state="idle">Saved connections load when you open Direct connection settings.</p>
+          <details><summary>Manage saved connections</summary><p class="subtle">Save a direct database connection in SQLcl, then refresh this list. Selecting a name here maps it to the connection reference above.</p><pre>connmgr list -flat</pre></details>
+        </fieldset>
+        <fieldset id="connection-ords-group" class="connection-group" hidden disabled>
+          <legend>ORDS HTTP(S)</legend>
+          <p class="subtle">Use your existing Oracle database username and password through ORDS. No separate ORDS account is needed. The schema must be REST-enabled and permit REST-enabled SQL.</p>
+          <label>ORDS schema URL<input id="connection-ords-url" type="url" maxlength="2048" placeholder="https://example.com/ords/schema-alias/"></label><p class="subtle">Use the schema URL provided by your administrator. Its schema alias can differ from your database username.</p>
+          <div class="two-columns"><label>Database username<input id="connection-ords-user" maxlength="128" autocomplete="off" placeholder="Your Oracle database username"></label><label>Database password<input id="connection-ords-password" type="password" autocomplete="new-password"></label></div><p id="connection-password-note" class="subtle">Leave the password blank to keep it for the same URL and database username. A changed URL or username requires a password.</p>
+          <p class="subtle connection-storage-note">SQLcl cannot save ORDS connections. APEXREST stores these settings and the database password locally at plugin level.</p>
+          <details><summary>Configure ORDS from the CLI</summary><p class="subtle">Provide your database password through a local file:</p><pre>apexrest connection add --name REF --ords-url https://example.com/ords/schema-alias/ --ords-username DATABASE_USER --password-file PATH</pre><p class="subtle">Interactive SQLcl example:</p><pre>connect -orest DATABASE_USER@https://example.com/ords/schema-alias/</pre></details>
+        </fieldset>
+        <button id="connection-save" type="submit">Save direct connection</button>
+      </form><div id="settings-live"></div>
+    </section>
+    <footer>APEXREST for Codex <span id="version"></span><span>Local workspace · Updates every 2 seconds</span></footer>
+  </main>
+  <dialog id="task-dialog"><form id="task-form"><div class="section-heading"><div><p class="eyebrow">DEVELOPMENT TASK</p><h2>Start a task</h2></div><button type="button" id="close-task" class="quiet" aria-label="Close new task">✕</button></div><label for="task">Task and acceptance criteria</label><textarea id="task" rows="6" maxlength="16000" required placeholder="Describe the APEX change, target and checks. Include any existing authorization and constraints."></textarea><div class="actions"><label>Execution mode<select id="task-execution-mode"><option value="single">Single agent</option><option value="team">Agent team</option></select></label><label>Verification browser<select id="task-browser-mode"><option value="codex">Codex in-app browser</option><option value="external">External system browser</option></select></label><label>Developers<select id="task-developers"><option>1</option><option>2</option><option>3</option></select></label><label>Permissions<select id="task-sandbox"><option value="workspace-write">Project write</option><option value="read-only">Read only</option></select></label><label>Time limit (seconds)<input id="task-timeout" type="number" min="30" max="3600" required></label></div><p id="task-workflow-note" class="subtle"></p><button type="submit" class="primary">Start task</button></form></dialog>
+</body>
+</html>