apexrest 1.2.0 → 1.3.0

package/dist/codex-compat/plugins/apexrest-apex/runtime/chunk-AQZLLQ3D.mjs

@@ -1,203 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  PanelService,
-  panelActionSchema
-} from "./chunk-BD2AVCFU.mjs";
-import {
-  parse,
-  resourceRoot
-} from "./chunk-3MDDJFXN.mjs";
-import {
-  Fault,
-  contained,
-  exists,
-  failure,
-  readJson,
-  withLock,
-  writeJson
-} from "./chunk-2Z3BZF66.mjs";
-
-// packages/core/src/panel-server.ts
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { createServer } from "node:http";
-import { randomBytes, timingSafeEqual } from "node:crypto";
-import { readFile } from "node:fs/promises";
-import { spawn } from "node:child_process";
-import { setTimeout as delay } from "node:timers/promises";
-function validSession(value) {
-  const s = value;
-  return !!s && Number.isInteger(s.port) && s.port > 0 && s.port < 65536 && typeof s.token === "string" && /^[a-f0-9]{64}$/.test(s.token) && typeof s.project === "string";
-}
-async function panelDocument() {
-  const root = path.join(resourceRoot(), "panel");
-  const [html, css, js] = await Promise.all(
-    ["index.html", "panel.css", "panel.js"].map((file) => readFile(path.join(root, file), "utf8"))
-  );
-  return html.replace('<link rel="stylesheet" href="/panel.css">', () => "<style>" + css + "</style>").replace('<script src="/panel.js" defer></script>', "").replace("</body>", () => "<script>" + js.replaceAll("</script", "<\\/script") + "</script>\n</body>");
-}
-async function startPanelServer(root, idleMs = 36e5) {
-  const token = randomBytes(32).toString("hex");
-  const service = new PanelService(root);
-  let lastRequest = Date.now(), origin = "";
-  const server = createServer(async (req, res) => {
-    res.setHeader("Cache-Control", "no-store");
-    res.setHeader("X-Content-Type-Options", "nosniff");
-    res.setHeader("Referrer-Policy", "no-referrer");
-    res.setHeader(
-      "Content-Security-Policy",
-      "default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self'; img-src 'self' data:; frame-ancestors 'self'"
-    );
-    const json = (status, data) => {
-      res.writeHead(status, { "Content-Type": "application/json" });
-      res.end(JSON.stringify(data));
-    };
-    try {
-      if (req.headers.host !== origin.slice(7) || req.headers.origin && req.headers.origin !== origin) {
-        json(403, { error: "Origin rejected." });
-        return;
-      }
-      const url = new URL(req.url ?? "/", origin);
-      const assets = {
-        "/": ["index.html", "text/html; charset=utf-8"],
-        "/panel.css": ["panel.css", "text/css; charset=utf-8"],
-        "/panel.js": ["panel.js", "text/javascript; charset=utf-8"]
-      };
-      if (req.method === "GET" && assets[url.pathname]) {
-        const [file, type] = assets[url.pathname];
-        res.writeHead(200, { "Content-Type": type });
-        res.end(await readFile(path.join(resourceRoot(), "panel", file)));
-        return;
-      }
-      const supplied = Buffer.from(String(req.headers.authorization ?? "").replace(/^Bearer /, ""));
-      if (supplied.length !== token.length || !timingSafeEqual(supplied, Buffer.from(token))) {
-        json(401, { error: "Open this panel from Codex to authorize the local session." });
-        return;
-      }
-      lastRequest = Date.now();
-      if (req.method === "GET" && url.pathname === "/health") {
-        json(200, { project: root });
-        return;
-      }
-      if (req.method === "GET" && url.pathname === "/api/status") {
-        json(200, await service.snapshot());
-        return;
-      }
-      if (req.method === "POST" && url.pathname === "/api/action") {
-        if (req.headers["content-type"] !== "application/json") {
-          json(415, { error: "Expected JSON." });
-          return;
-        }
-        const chunks = [];
-        let bytes = 0;
-        for await (const chunk of req) {
-          bytes += chunk.length;
-          if (bytes > 32768) {
-            json(413, { error: "Request too large." });
-            return;
-          }
-          chunks.push(chunk);
-        }
-        const { action } = parse(panelActionSchema, {
-          action: JSON.parse(Buffer.concat(chunks).toString("utf8"))
-        });
-        json(200, await service.act(action));
-        return;
-      }
-      json(404, { error: "Not found." });
-    } catch (error) {
-      json(400, failure("panel", error));
-    }
-  });
-  server.requestTimeout = 15e3;
-  server.headersTimeout = 1e4;
-  await new Promise((resolve, reject) => {
-    server.once("error", reject);
-    server.listen(0, "127.0.0.1", resolve);
-  });
-  const address = server.address();
-  if (!address || typeof address === "string") throw new Error("Panel could not bind localhost.");
-  origin = `http://127.0.0.1:${address.port}`;
-  const timer = setInterval(
-    () => {
-      if (Date.now() - lastRequest > idleMs) void close();
-    },
-    Math.min(idleMs, 6e4)
-  );
-  const close = () => {
-    clearInterval(timer);
-    server.closeIdleConnections();
-    return new Promise((resolve) => server.close(() => resolve()));
-  };
-  return {
-    session: { port: address.port, token, project: root, pid: process.pid },
-    close
-  };
-}
-async function servePanel(root) {
-  const handle = await startPanelServer(root);
-  await writeJson(await contained(root, ".apexrest/panel/session.json"), handle.session);
-  process.once("SIGTERM", () => {
-    void handle.close();
-  });
-  process.once("SIGINT", () => {
-    void handle.close();
-  });
-}
-async function openPanel(root) {
-  const file = await contained(root, ".apexrest/panel/session.json");
-  const read = async () => {
-    if (!await exists(file)) return null;
-    const session = await readJson(file).catch(() => null);
-    if (!validSession(session) || session.project !== root) return null;
-    try {
-      const response = await fetch(`http://127.0.0.1:${session.port}/health`, {
-        headers: { Authorization: "Bearer " + session.token },
-        redirect: "error",
-        signal: AbortSignal.timeout(1e3)
-      });
-      if (response.ok && (await response.json()).project === root) return session;
-    } catch {
-    }
-    return null;
-  };
-  return withLock(await contained(root, ".apexrest/panel/start.lock"), async () => {
-    let session = await read();
-    if (!session) {
-      const worker = spawn(
-        process.execPath,
-        [path.join(path.dirname(fileURLToPath(import.meta.url)), "apexrest.mjs"), "--panel-worker", root],
-        {
-          cwd: root,
-          env: process.env,
-          detached: true,
-          stdio: "ignore",
-          windowsHide: true
-        }
-      );
-      await new Promise((resolve, reject) => {
-        worker.once("spawn", resolve);
-        worker.once("error", reject);
-      });
-      worker.unref();
-      for (let i = 0; i < 50 && !session; i++) {
-        await delay(100);
-        session = await read();
-      }
-      if (!session)
-        throw new Fault("PANEL_START_FAILED", "The local panel did not become ready.", 3, "blocked");
-    }
-    return {
-      project: root,
-      url: `http://127.0.0.1:${session.port}/#session=${session.token}`,
-      nextAction: "Open this URL in the Codex in-app browser using open_in_codex when available. Codex CLI: apexrest panel tui --project PATH."
-    };
-  });
-}
-
-export {
-  panelDocument,
-  startPanelServer,
-  servePanel,
-  openPanel
-};

package/dist/codex-compat/plugins/apexrest-apex/runtime/chunk-BD2AVCFU.mjs

@@ -1,367 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  browserPreferences,
-  browserPreferencesSchema,
-  openVerificationBrowser
-} from "./chunk-4MYHJ2IU.mjs";
-import {
-  VERSION
-} from "./chunk-S24BD6PY.mjs";
-import {
-  OracleAdapter,
-  configureConnection,
-  configureSqlcl,
-  connections,
-  external_exports,
-  loadProject,
-  ordsUrl,
-  ordsUsername,
-  parse,
-  policy,
-  refName,
-  requireTrust,
-  runProcess,
-  savedConnectionName,
-  sqlclConfig,
-  sqlclConfigSchema
-} from "./chunk-3MDDJFXN.mjs";
-import {
-  Fault,
-  contained,
-  exists,
-  readJson,
-  sanitized,
-  writeJson
-} from "./chunk-2Z3BZF66.mjs";
-
-// packages/core/src/panel-schema.ts
-var panelPreferencesSchema = external_exports.strictObject({
-  browserMode: browserPreferencesSchema.shape.browserMode.removeDefault().optional()
-});
-var panelReadSchema = external_exports.strictObject({
-  project: external_exports.string().min(1).max(4096).optional()
-});
-var connectionActionSchema = external_exports.strictObject({
-  kind: external_exports.literal("connection"),
-  name: refName,
-  sqlclName: savedConnectionName.optional(),
-  ordsUrl: ordsUrl.optional(),
-  ordsUsername: ordsUsername.optional(),
-  password: external_exports.string().min(1).max(4096).optional()
-});
-var panelActionSchema = external_exports.strictObject({
-  project: external_exports.string().min(1).max(4096).optional(),
-  action: external_exports.discriminatedUnion("kind", [
-    external_exports.strictObject({ kind: external_exports.literal("preferences"), settings: panelPreferencesSchema }),
-    external_exports.strictObject({ kind: external_exports.literal("sqlcl"), settings: sqlclConfigSchema }),
-    external_exports.strictObject({ kind: external_exports.literal("saved-connections") }),
-    connectionActionSchema,
-    external_exports.strictObject({ kind: external_exports.literal("cancel-job"), id: external_exports.uuid() }),
-    external_exports.strictObject({ kind: external_exports.literal("validate") }),
-    external_exports.strictObject({ kind: external_exports.literal("browser"), env: external_exports.string().min(1).max(100) }),
-    external_exports.strictObject({
-      kind: external_exports.literal("test"),
-      suite: external_exports.enum(["unit", "sql", "api", "e2e", "all"]),
-      env: external_exports.string().min(1).max(100).optional()
-    }),
-    external_exports.strictObject({ kind: external_exports.literal("plan"), env: external_exports.string().min(1).max(100) })
-  ])
-});
-var publicPanelActionSchema = panelActionSchema.extend({
-  action: external_exports.discriminatedUnion("kind", [
-    panelActionSchema.shape.action.options[0],
-    ...panelActionSchema.shape.action.options.slice(1).map(
-      (option) => option.shape.kind.value === "connection" ? connectionActionSchema.omit({ password: true }) : option
-    )
-  ])
-});
-
-// packages/core/src/jobs.ts
-import path from "node:path";
-import { spawn } from "node:child_process";
-import { randomUUID } from "node:crypto";
-import { setTimeout as delay } from "node:timers/promises";
-var JobService = class {
-  constructor(ctx) {
-    this.ctx = ctx;
-  }
-  ctx;
-  async start(operation, input, runtime) {
-    await requireTrust(this.ctx.root);
-    if (!["apex.generate", "apex.export", "apex.validate", "deploy.plan", "deploy.apply", "test.run"].includes(
-      operation
-    ))
-      throw new Fault("INVALID_JOB_OPERATION", "Operation cannot run as a background job.", 2);
-    const id = randomUUID(), root = await contained(this.ctx.root, ".apexrest/jobs/" + id);
-    await writeJson(path.join(root, "request.json"), {
-      id,
-      operation,
-      input: { ...input, project: this.ctx.root }
-    });
-    await writeJson(path.join(root, "state.json"), {
-      id,
-      status: "queued",
-      operation,
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-    const worker = spawn(process.execPath, [runtime, "--job-worker", this.ctx.root, id], {
-      cwd: this.ctx.root,
-      env: process.env,
-      detached: true,
-      stdio: "ignore",
-      windowsHide: true
-    });
-    await new Promise((resolve, reject) => {
-      worker.once("spawn", resolve);
-      worker.once("error", reject);
-    });
-    worker.unref();
-    return {
-      jobId: id,
-      status: "queued",
-      nextAction: "Wait for this job with apexrest_job_status and waitSeconds:25; never rerun the operation to fetch results. Cancellation does not imply database rollback."
-    };
-  }
-  async status(id, waitSeconds = 0, signal) {
-    parse(external_exports.uuid(), id);
-    parse(external_exports.number().int().min(0).max(30), waitSeconds);
-    const root = await contained(this.ctx.root, ".apexrest/jobs/" + id);
-    const deadline = Date.now() + waitSeconds * 1e3;
-    for (; ; ) {
-      const state = await readJson(path.join(root, "state.json"));
-      if (!["queued", "running"].includes(state.status)) return state;
-      if (Date.parse(state.updatedAt) + 6e4 < Date.now())
-        return {
-          ...state,
-          status: "outcome_unknown",
-          nextAction: "Worker heartbeat expired. Reconcile target before retrying."
-        };
-      const remaining = deadline - Date.now();
-      if (remaining <= 0 || signal?.aborted) return state;
-      await delay(Math.min(250, remaining), void 0, { signal }).catch((error) => {
-        if (!signal?.aborted) throw error;
-      });
-    }
-  }
-  async cancel(id) {
-    await requireTrust(this.ctx.root);
-    parse(external_exports.uuid(), id);
-    const state = await this.status(id);
-    if (!["queued", "running"].includes(state.status)) return state;
-    await writeJson(await contained(this.ctx.root, ".apexrest/jobs/" + id + "/cancel.json"), {
-      requestedAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-    return { jobId: id, status: "cancellation_requested", rollbackConfirmed: false };
-  }
-};
-async function executeJob(ctx, id, execute) {
-  await requireTrust(ctx.root);
-  parse(external_exports.uuid(), id);
-  const root = await contained(ctx.root, ".apexrest/jobs/" + id);
-  const request = await readJson(path.join(root, "request.json"));
-  const controller = new AbortController();
-  let done = false;
-  const pulse = async () => {
-    if (done) return;
-    if (await exists(path.join(root, "cancel.json"))) controller.abort();
-    if (!done)
-      await writeJson(path.join(root, "state.json"), {
-        id,
-        operation: request.operation,
-        status: "running",
-        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      });
-  };
-  await pulse();
-  let pending = Promise.resolve();
-  const timer = setInterval(() => {
-    pending = pending.then(pulse).catch(() => {
-      controller.abort();
-    });
-  }, 2e3), timeout = setTimeout(() => controller.abort(), 9e5);
-  try {
-    const result = await execute(request.operation, request.input, controller.signal);
-    done = true;
-    clearInterval(timer);
-    clearTimeout(timeout);
-    await pending;
-    await writeJson(path.join(root, "state.json"), {
-      id,
-      status: "completed",
-      result,
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-  } finally {
-    done = true;
-    clearInterval(timer);
-    clearTimeout(timeout);
-  }
-}
-
-// packages/core/src/panel.ts
-import path2 from "node:path";
-import { fileURLToPath } from "node:url";
-import { readdir, realpath, stat } from "node:fs/promises";
-import { randomUUID as randomUUID2 } from "node:crypto";
-var safe = (value) => sanitized(value);
-var PanelService = class {
-  constructor(root, oracle = new OracleAdapter()) {
-    this.root = root;
-    this.oracle = oracle;
-  }
-  root;
-  oracle;
-  async preferences() {
-    return browserPreferences(this.root);
-  }
-  async records(folder) {
-    const base = await contained(this.root, ".apexrest/" + folder);
-    if (!await exists(base)) return [];
-    const entries = (await readdir(base, { withFileTypes: true })).filter(
-      (e) => e.isDirectory() && external_exports.uuid().safeParse(e.name).success
-    );
-    if (entries.length > 2e3)
-      throw new Fault(
-        "PANEL_HISTORY_LIMIT",
-        "Archive old operation records before loading more than 2000 runs.",
-        2
-      );
-    const files = await Promise.all(
-      entries.map(async (entry) => {
-        const file = await contained(base, entry.name + "/state.json");
-        const info = await stat(file).catch(() => null);
-        return { id: entry.name, file, at: info?.mtimeMs ?? 0, size: info?.size ?? 0 };
-      })
-    );
-    return Promise.all(
-      files.filter((f) => f.size > 0).sort((a, b) => b.at - a.at).slice(0, 12).map(async (f) => {
-        if (f.size > 2 * 1024 * 1024)
-          return {
-            id: f.id,
-            status: "unavailable",
-            diagnostics: ["Record exceeds the panel limit."]
-          };
-        try {
-          return { ...await readJson(f.file), id: f.id };
-        } catch {
-          return {
-            id: f.id,
-            status: "unavailable",
-            diagnostics: ["Cannot read this operation record."]
-          };
-        }
-      })
-    );
-  }
-  async snapshot() {
-    this.root = await realpath(this.root);
-    const ctx = await loadProject(this.root).catch((error) => {
-      if (error instanceof Fault && error.code === "PROJECT_NOT_CONFIGURED") return null;
-      throw error;
-    });
-    const [prefs, sqlcl, refs, security, jobRecords, deploymentRecords] = await Promise.all([
-      this.preferences(),
-      sqlclConfig(),
-      connections(),
-      policy(),
-      this.records("jobs"),
-      this.records("deployments")
-    ]);
-    const jobs = await Promise.all(
-      jobRecords.map(async (row) => {
-        const state = ctx ? await new JobService(ctx).status(String(row.id)) : row;
-        const result = state.result ?? {};
-        return {
-          id: String(row.id),
-          operation: String(row.operation ?? result.operation ?? "operation"),
-          status: String(result.status ?? state.status),
-          updatedAt: String(state.updatedAt ?? ""),
-          summary: String(result.summary ?? "").slice(0, 1e3),
-          diagnostics: Array.isArray(result.diagnostics) ? result.diagnostics.slice(0, 5) : [],
-          artifacts: Array.isArray(result.artifacts) ? result.artifacts.slice(0, 10) : []
-        };
-      })
-    );
-    const deployments = deploymentRecords.map((row) => ({
-      id: String(row.id),
-      status: String(row.state ?? "unknown"),
-      at: String(row.at ?? ""),
-      details: JSON.stringify(safe(row.details ?? {})).slice(0, 1200)
-    }));
-    let changes = { status: "unavailable", files: [] };
-    try {
-      const git = await runProcess({
-        executable: "git",
-        args: ["status", "--porcelain=v1", "--untracked-files=normal"],
-        cwd: this.root,
-        timeoutMs: 3e3
-      });
-      if (git.code === 0)
-        changes = { status: "available", files: git.stdout.split("\n").filter(Boolean).slice(0, 80) };
-    } catch {
-    }
-    let toolchain = null;
-    if (ctx) {
-      const file = await contained(this.root, ctx.config.toolchain.lockFile);
-      if (await exists(file)) {
-        if ((await stat(file)).size <= 128e3) toolchain = await readJson(file);
-      }
-    }
-    return safe({
-      version: VERSION,
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      project: this.root,
-      configured: !!ctx,
-      trusted: security.trustedProjects.includes(this.root),
-      configuration: ctx?.config ?? null,
-      sqlcl,
-      preferences: prefs,
-      connections: refs,
-      toolchain,
-      jobs,
-      deployments,
-      changes,
-      permissions: {
-        activeGrants: security.grants.filter((g) => g.projectRoot === this.root && Date.parse(g.expiresAt) > Date.now()).map((g) => ({ operations: g.operations, expiresAt: g.expiresAt, exactPlan: !!g.planDigest }))
-      }
-    });
-  }
-  async act(action) {
-    action = parse(panelActionSchema, { action }).action;
-    this.root = await realpath(this.root);
-    await requireTrust(this.root);
-    if (action.kind === "saved-connections") return this.oracle.savedConnections();
-    if (action.kind === "preferences") {
-      const settings = { ...await this.preferences(), ...action.settings };
-      await writeJson(await contained(this.root, ".apexrest/panel/preferences.json"), settings);
-      return { saved: true, appliesTo: "browser-verification" };
-    }
-    if (action.kind === "sqlcl") {
-      return configureSqlcl(
-        action.settings.mode,
-        action.settings.mcpRestrictLevel,
-        action.settings.databaseTransport
-      );
-    }
-    if (action.kind === "connection") return configureConnection(action.name, action);
-    const ctx = await loadProject(this.root);
-    if (action.kind === "browser") return openVerificationBrowser(ctx, action.env);
-    if (action.kind === "cancel-job") return new JobService(ctx).cancel(action.id);
-    const operation = action.kind === "validate" ? "apex.validate" : action.kind === "plan" ? "deploy.plan" : "test.run";
-    const input = action.kind === "plan" ? { env: action.env, out: ".apexrest/plans/" + randomUUID2() + ".json" } : action.kind === "test" ? { suite: action.suite, ...action.env ? { env: action.env } : {} } : {};
-    return new JobService(ctx).start(
-      operation,
-      input,
-      path2.join(path2.dirname(fileURLToPath(import.meta.url)), "apexrest.mjs")
-    );
-  }
-};
-
-export {
-  panelReadSchema,
-  panelActionSchema,
-  publicPanelActionSchema,
-  JobService,
-  executeJob,
-  PanelService
-};

package/dist/codex-compat/plugins/apexrest-apex/runtime/chunk-IX6V6ZGW.mjs

@@ -1,18 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  openPanel,
-  panelDocument,
-  servePanel,
-  startPanelServer
-} from "./chunk-AQZLLQ3D.mjs";
-import "./chunk-BD2AVCFU.mjs";
-import "./chunk-4MYHJ2IU.mjs";
-import "./chunk-S24BD6PY.mjs";
-import "./chunk-3MDDJFXN.mjs";
-import "./chunk-2Z3BZF66.mjs";
-export {
-  openPanel,
-  panelDocument,
-  servePanel,
-  startPanelServer
-};

package/dist/codex-compat/plugins/apexrest-apex/runtime/chunk-NDZ2RWQU.mjs

@@ -1,13 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  browserInstructions,
-  externalBrowserCommand,
-  openVerificationBrowser
-} from "./chunk-4MYHJ2IU.mjs";
-import "./chunk-3MDDJFXN.mjs";
-import "./chunk-2Z3BZF66.mjs";
-export {
-  browserInstructions,
-  externalBrowserCommand,
-  openVerificationBrowser
-};

package/dist/codex-compat/plugins/apexrest-apex/runtime/chunk-QIVPMPU3.mjs

@@ -1,14 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  ToolchainService,
-  lockSchema,
-  platformProfile,
-  runtimeState
-} from "./chunk-3MDDJFXN.mjs";
-import "./chunk-2Z3BZF66.mjs";
-export {
-  ToolchainService,
-  lockSchema,
-  platformProfile,
-  runtimeState
-};