cerebras-cli 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (314) hide show
  1. package/AGENTS.md +27 -0
  2. package/Dockerfile +10 -0
  3. package/README.md +15 -0
  4. package/bin/opencode +84 -0
  5. package/bunfig.toml +4 -0
  6. package/package.json +128 -0
  7. package/parsers-config.ts +239 -0
  8. package/script/build.ts +151 -0
  9. package/script/postinstall.mjs +122 -0
  10. package/script/publish.ts +256 -0
  11. package/script/schema.ts +47 -0
  12. package/src/acp/README.md +164 -0
  13. package/src/acp/agent.ts +812 -0
  14. package/src/acp/session.ts +70 -0
  15. package/src/acp/types.ts +22 -0
  16. package/src/agent/agent.ts +310 -0
  17. package/src/agent/generate.txt +75 -0
  18. package/src/auth/index.ts +70 -0
  19. package/src/bun/index.ts +152 -0
  20. package/src/bus/global.ts +10 -0
  21. package/src/bus/index.ts +142 -0
  22. package/src/cli/bootstrap.ts +17 -0
  23. package/src/cli/cmd/acp.ts +88 -0
  24. package/src/cli/cmd/agent.ts +165 -0
  25. package/src/cli/cmd/auth.ts +369 -0
  26. package/src/cli/cmd/cmd.ts +7 -0
  27. package/src/cli/cmd/debug/config.ts +15 -0
  28. package/src/cli/cmd/debug/file.ts +91 -0
  29. package/src/cli/cmd/debug/index.ts +41 -0
  30. package/src/cli/cmd/debug/lsp.ts +47 -0
  31. package/src/cli/cmd/debug/ripgrep.ts +83 -0
  32. package/src/cli/cmd/debug/scrap.ts +15 -0
  33. package/src/cli/cmd/debug/snapshot.ts +48 -0
  34. package/src/cli/cmd/export.ts +88 -0
  35. package/src/cli/cmd/generate.ts +38 -0
  36. package/src/cli/cmd/github.ts +1200 -0
  37. package/src/cli/cmd/import.ts +98 -0
  38. package/src/cli/cmd/mcp.ts +400 -0
  39. package/src/cli/cmd/models.ts +77 -0
  40. package/src/cli/cmd/pr.ts +112 -0
  41. package/src/cli/cmd/run.ts +342 -0
  42. package/src/cli/cmd/serve.ts +31 -0
  43. package/src/cli/cmd/session.ts +106 -0
  44. package/src/cli/cmd/stats.ts +298 -0
  45. package/src/cli/cmd/tui/app.tsx +732 -0
  46. package/src/cli/cmd/tui/attach.ts +25 -0
  47. package/src/cli/cmd/tui/component/border.tsx +21 -0
  48. package/src/cli/cmd/tui/component/dialog-agent.tsx +31 -0
  49. package/src/cli/cmd/tui/component/dialog-command.tsx +124 -0
  50. package/src/cli/cmd/tui/component/dialog-feedback.tsx +160 -0
  51. package/src/cli/cmd/tui/component/dialog-mcp.tsx +86 -0
  52. package/src/cli/cmd/tui/component/dialog-model.tsx +223 -0
  53. package/src/cli/cmd/tui/component/dialog-notification.tsx +78 -0
  54. package/src/cli/cmd/tui/component/dialog-provider.tsx +222 -0
  55. package/src/cli/cmd/tui/component/dialog-session-list.tsx +97 -0
  56. package/src/cli/cmd/tui/component/dialog-session-rename.tsx +31 -0
  57. package/src/cli/cmd/tui/component/dialog-status.tsx +114 -0
  58. package/src/cli/cmd/tui/component/dialog-tag.tsx +44 -0
  59. package/src/cli/cmd/tui/component/dialog-theme-list.tsx +50 -0
  60. package/src/cli/cmd/tui/component/logo.tsx +37 -0
  61. package/src/cli/cmd/tui/component/notification-banner.tsx +58 -0
  62. package/src/cli/cmd/tui/component/prompt/autocomplete.tsx +530 -0
  63. package/src/cli/cmd/tui/component/prompt/history.tsx +107 -0
  64. package/src/cli/cmd/tui/component/prompt/index.tsx +931 -0
  65. package/src/cli/cmd/tui/context/args.tsx +14 -0
  66. package/src/cli/cmd/tui/context/directory.ts +12 -0
  67. package/src/cli/cmd/tui/context/exit.tsx +23 -0
  68. package/src/cli/cmd/tui/context/helper.tsx +25 -0
  69. package/src/cli/cmd/tui/context/keybind.tsx +111 -0
  70. package/src/cli/cmd/tui/context/kv.tsx +49 -0
  71. package/src/cli/cmd/tui/context/local.tsx +339 -0
  72. package/src/cli/cmd/tui/context/prompt.tsx +18 -0
  73. package/src/cli/cmd/tui/context/route.tsx +45 -0
  74. package/src/cli/cmd/tui/context/sdk.tsx +75 -0
  75. package/src/cli/cmd/tui/context/sync.tsx +374 -0
  76. package/src/cli/cmd/tui/context/theme/aura.json +69 -0
  77. package/src/cli/cmd/tui/context/theme/ayu.json +80 -0
  78. package/src/cli/cmd/tui/context/theme/catppuccin-macchiato.json +233 -0
  79. package/src/cli/cmd/tui/context/theme/catppuccin.json +112 -0
  80. package/src/cli/cmd/tui/context/theme/cobalt2.json +228 -0
  81. package/src/cli/cmd/tui/context/theme/dracula.json +219 -0
  82. package/src/cli/cmd/tui/context/theme/everforest.json +241 -0
  83. package/src/cli/cmd/tui/context/theme/flexoki.json +237 -0
  84. package/src/cli/cmd/tui/context/theme/github.json +233 -0
  85. package/src/cli/cmd/tui/context/theme/gruvbox.json +95 -0
  86. package/src/cli/cmd/tui/context/theme/kanagawa.json +77 -0
  87. package/src/cli/cmd/tui/context/theme/material.json +235 -0
  88. package/src/cli/cmd/tui/context/theme/matrix.json +77 -0
  89. package/src/cli/cmd/tui/context/theme/mercury.json +252 -0
  90. package/src/cli/cmd/tui/context/theme/monokai.json +221 -0
  91. package/src/cli/cmd/tui/context/theme/nightowl.json +221 -0
  92. package/src/cli/cmd/tui/context/theme/nord.json +223 -0
  93. package/src/cli/cmd/tui/context/theme/one-dark.json +84 -0
  94. package/src/cli/cmd/tui/context/theme/orng.json +245 -0
  95. package/src/cli/cmd/tui/context/theme/palenight.json +222 -0
  96. package/src/cli/cmd/tui/context/theme/rosepine.json +234 -0
  97. package/src/cli/cmd/tui/context/theme/solarized.json +223 -0
  98. package/src/cli/cmd/tui/context/theme/synthwave84.json +226 -0
  99. package/src/cli/cmd/tui/context/theme/tokyonight.json +243 -0
  100. package/src/cli/cmd/tui/context/theme/vercel.json +245 -0
  101. package/src/cli/cmd/tui/context/theme/vesper.json +218 -0
  102. package/src/cli/cmd/tui/context/theme/zenburn.json +223 -0
  103. package/src/cli/cmd/tui/context/theme.tsx +1077 -0
  104. package/src/cli/cmd/tui/event.ts +39 -0
  105. package/src/cli/cmd/tui/routes/home.tsx +104 -0
  106. package/src/cli/cmd/tui/routes/session/dialog-message.tsx +93 -0
  107. package/src/cli/cmd/tui/routes/session/dialog-timeline.tsx +37 -0
  108. package/src/cli/cmd/tui/routes/session/footer.tsx +76 -0
  109. package/src/cli/cmd/tui/routes/session/header.tsx +183 -0
  110. package/src/cli/cmd/tui/routes/session/index.tsx +1703 -0
  111. package/src/cli/cmd/tui/routes/session/sidebar.tsx +586 -0
  112. package/src/cli/cmd/tui/spawn.ts +60 -0
  113. package/src/cli/cmd/tui/thread.ts +120 -0
  114. package/src/cli/cmd/tui/ui/dialog-alert.tsx +55 -0
  115. package/src/cli/cmd/tui/ui/dialog-confirm.tsx +81 -0
  116. package/src/cli/cmd/tui/ui/dialog-help.tsx +36 -0
  117. package/src/cli/cmd/tui/ui/dialog-prompt.tsx +75 -0
  118. package/src/cli/cmd/tui/ui/dialog-select.tsx +317 -0
  119. package/src/cli/cmd/tui/ui/dialog.tsx +170 -0
  120. package/src/cli/cmd/tui/ui/spinner.ts +368 -0
  121. package/src/cli/cmd/tui/ui/toast.tsx +100 -0
  122. package/src/cli/cmd/tui/util/clipboard.ts +127 -0
  123. package/src/cli/cmd/tui/util/editor.ts +32 -0
  124. package/src/cli/cmd/tui/util/terminal.ts +114 -0
  125. package/src/cli/cmd/tui/worker.ts +63 -0
  126. package/src/cli/cmd/uninstall.ts +344 -0
  127. package/src/cli/cmd/upgrade.ts +67 -0
  128. package/src/cli/cmd/web.ts +84 -0
  129. package/src/cli/error.ts +55 -0
  130. package/src/cli/ui.ts +84 -0
  131. package/src/cli/upgrade.ts +25 -0
  132. package/src/command/index.ts +79 -0
  133. package/src/command/template/initialize.txt +10 -0
  134. package/src/command/template/review.txt +73 -0
  135. package/src/config/config.ts +886 -0
  136. package/src/config/markdown.ts +41 -0
  137. package/src/env/index.ts +26 -0
  138. package/src/file/fzf.ts +124 -0
  139. package/src/file/ignore.ts +83 -0
  140. package/src/file/index.ts +326 -0
  141. package/src/file/ripgrep.ts +391 -0
  142. package/src/file/time.ts +38 -0
  143. package/src/file/watcher.ts +89 -0
  144. package/src/flag/flag.ts +28 -0
  145. package/src/format/formatter.ts +277 -0
  146. package/src/format/index.ts +137 -0
  147. package/src/global/index.ts +52 -0
  148. package/src/id/id.ts +73 -0
  149. package/src/ide/index.ts +75 -0
  150. package/src/index.ts +158 -0
  151. package/src/installation/index.ts +194 -0
  152. package/src/lsp/client.ts +215 -0
  153. package/src/lsp/index.ts +370 -0
  154. package/src/lsp/language.ts +111 -0
  155. package/src/lsp/server.ts +1327 -0
  156. package/src/mcp/auth.ts +82 -0
  157. package/src/mcp/index.ts +576 -0
  158. package/src/mcp/oauth-callback.ts +203 -0
  159. package/src/mcp/oauth-provider.ts +132 -0
  160. package/src/notification/index.ts +101 -0
  161. package/src/patch/index.ts +622 -0
  162. package/src/permission/index.ts +198 -0
  163. package/src/plugin/index.ts +95 -0
  164. package/src/project/bootstrap.ts +31 -0
  165. package/src/project/instance.ts +68 -0
  166. package/src/project/project.ts +133 -0
  167. package/src/project/state.ts +65 -0
  168. package/src/project/vcs.ts +77 -0
  169. package/src/provider/auth.ts +143 -0
  170. package/src/provider/models-macro.ts +11 -0
  171. package/src/provider/models.ts +93 -0
  172. package/src/provider/provider.ts +996 -0
  173. package/src/provider/sdk/openai-compatible/src/README.md +5 -0
  174. package/src/provider/sdk/openai-compatible/src/index.ts +2 -0
  175. package/src/provider/sdk/openai-compatible/src/openai-compatible-provider.ts +100 -0
  176. package/src/provider/sdk/openai-compatible/src/responses/convert-to-openai-responses-input.ts +303 -0
  177. package/src/provider/sdk/openai-compatible/src/responses/map-openai-responses-finish-reason.ts +27 -0
  178. package/src/provider/sdk/openai-compatible/src/responses/openai-config.ts +18 -0
  179. package/src/provider/sdk/openai-compatible/src/responses/openai-error.ts +22 -0
  180. package/src/provider/sdk/openai-compatible/src/responses/openai-responses-api-types.ts +207 -0
  181. package/src/provider/sdk/openai-compatible/src/responses/openai-responses-language-model.ts +1713 -0
  182. package/src/provider/sdk/openai-compatible/src/responses/openai-responses-prepare-tools.ts +177 -0
  183. package/src/provider/sdk/openai-compatible/src/responses/openai-responses-settings.ts +1 -0
  184. package/src/provider/sdk/openai-compatible/src/responses/tool/code-interpreter.ts +88 -0
  185. package/src/provider/sdk/openai-compatible/src/responses/tool/file-search.ts +128 -0
  186. package/src/provider/sdk/openai-compatible/src/responses/tool/image-generation.ts +115 -0
  187. package/src/provider/sdk/openai-compatible/src/responses/tool/local-shell.ts +65 -0
  188. package/src/provider/sdk/openai-compatible/src/responses/tool/web-search-preview.ts +104 -0
  189. package/src/provider/sdk/openai-compatible/src/responses/tool/web-search.ts +103 -0
  190. package/src/provider/transform.ts +406 -0
  191. package/src/pty/index.ts +226 -0
  192. package/src/ratelimit/index.ts +185 -0
  193. package/src/server/error.ts +36 -0
  194. package/src/server/project.ts +50 -0
  195. package/src/server/server.ts +2463 -0
  196. package/src/server/tui.ts +71 -0
  197. package/src/session/compaction.ts +257 -0
  198. package/src/session/index.ts +470 -0
  199. package/src/session/message-v2.ts +641 -0
  200. package/src/session/message.ts +189 -0
  201. package/src/session/processor.ts +443 -0
  202. package/src/session/prompt/anthropic-20250930.txt +166 -0
  203. package/src/session/prompt/anthropic.txt +105 -0
  204. package/src/session/prompt/anthropic_spoof.txt +1 -0
  205. package/src/session/prompt/beast.txt +147 -0
  206. package/src/session/prompt/build-switch.txt +5 -0
  207. package/src/session/prompt/codex.txt +318 -0
  208. package/src/session/prompt/compaction.txt +12 -0
  209. package/src/session/prompt/copilot-gpt-5.txt +143 -0
  210. package/src/session/prompt/gemini.txt +155 -0
  211. package/src/session/prompt/max-steps.txt +16 -0
  212. package/src/session/prompt/plan-reminder-anthropic.txt +67 -0
  213. package/src/session/prompt/plan.txt +26 -0
  214. package/src/session/prompt/polaris.txt +107 -0
  215. package/src/session/prompt/qwen.txt +109 -0
  216. package/src/session/prompt/summarize.txt +4 -0
  217. package/src/session/prompt/title.txt +36 -0
  218. package/src/session/prompt.ts +1541 -0
  219. package/src/session/retry.ts +82 -0
  220. package/src/session/revert.ts +108 -0
  221. package/src/session/status.ts +75 -0
  222. package/src/session/summary.ts +203 -0
  223. package/src/session/system.ts +148 -0
  224. package/src/session/todo.ts +36 -0
  225. package/src/share/share-next.ts +195 -0
  226. package/src/share/share.ts +87 -0
  227. package/src/snapshot/index.ts +197 -0
  228. package/src/storage/storage.ts +226 -0
  229. package/src/telemetry/index.ts +232 -0
  230. package/src/tool/bash.ts +365 -0
  231. package/src/tool/bash.txt +128 -0
  232. package/src/tool/batch.ts +173 -0
  233. package/src/tool/batch.txt +28 -0
  234. package/src/tool/codesearch.ts +138 -0
  235. package/src/tool/codesearch.txt +12 -0
  236. package/src/tool/edit.ts +674 -0
  237. package/src/tool/edit.txt +10 -0
  238. package/src/tool/glob.ts +65 -0
  239. package/src/tool/glob.txt +6 -0
  240. package/src/tool/grep.ts +120 -0
  241. package/src/tool/grep.txt +8 -0
  242. package/src/tool/invalid.ts +17 -0
  243. package/src/tool/ls.ts +110 -0
  244. package/src/tool/ls.txt +1 -0
  245. package/src/tool/lsp-diagnostics.ts +26 -0
  246. package/src/tool/lsp-diagnostics.txt +1 -0
  247. package/src/tool/lsp-hover.ts +31 -0
  248. package/src/tool/lsp-hover.txt +1 -0
  249. package/src/tool/multiedit.ts +46 -0
  250. package/src/tool/multiedit.txt +41 -0
  251. package/src/tool/patch.ts +233 -0
  252. package/src/tool/patch.txt +1 -0
  253. package/src/tool/read.ts +217 -0
  254. package/src/tool/read.txt +12 -0
  255. package/src/tool/registry.ts +148 -0
  256. package/src/tool/task.ts +135 -0
  257. package/src/tool/task.txt +60 -0
  258. package/src/tool/todo.ts +39 -0
  259. package/src/tool/todoread.txt +14 -0
  260. package/src/tool/todowrite.txt +167 -0
  261. package/src/tool/tool.ts +66 -0
  262. package/src/tool/webfetch.ts +187 -0
  263. package/src/tool/webfetch.txt +14 -0
  264. package/src/tool/websearch.ts +150 -0
  265. package/src/tool/websearch.txt +11 -0
  266. package/src/tool/write.ts +99 -0
  267. package/src/tool/write.txt +8 -0
  268. package/src/types/shims.d.ts +3 -0
  269. package/src/util/color.ts +19 -0
  270. package/src/util/context.ts +25 -0
  271. package/src/util/defer.ts +12 -0
  272. package/src/util/eventloop.ts +20 -0
  273. package/src/util/filesystem.ts +69 -0
  274. package/src/util/fn.ts +11 -0
  275. package/src/util/iife.ts +3 -0
  276. package/src/util/keybind.ts +79 -0
  277. package/src/util/lazy.ts +11 -0
  278. package/src/util/locale.ts +81 -0
  279. package/src/util/lock.ts +98 -0
  280. package/src/util/log.ts +177 -0
  281. package/src/util/queue.ts +32 -0
  282. package/src/util/rpc.ts +42 -0
  283. package/src/util/scrap.ts +10 -0
  284. package/src/util/signal.ts +12 -0
  285. package/src/util/timeout.ts +14 -0
  286. package/src/util/token.ts +7 -0
  287. package/src/util/wildcard.ts +54 -0
  288. package/sst-env.d.ts +9 -0
  289. package/test/bun.test.ts +53 -0
  290. package/test/config/agent-color.test.ts +66 -0
  291. package/test/config/config.test.ts +503 -0
  292. package/test/config/markdown.test.ts +89 -0
  293. package/test/file/ignore.test.ts +10 -0
  294. package/test/fixture/fixture.ts +28 -0
  295. package/test/fixture/lsp/fake-lsp-server.js +77 -0
  296. package/test/ide/ide.test.ts +82 -0
  297. package/test/keybind.test.ts +317 -0
  298. package/test/lsp/client.test.ts +95 -0
  299. package/test/patch/patch.test.ts +348 -0
  300. package/test/preload.ts +38 -0
  301. package/test/project/project.test.ts +42 -0
  302. package/test/provider/provider.test.ts +1809 -0
  303. package/test/provider/transform.test.ts +305 -0
  304. package/test/session/retry.test.ts +61 -0
  305. package/test/session/session.test.ts +71 -0
  306. package/test/snapshot/snapshot.test.ts +939 -0
  307. package/test/tool/__snapshots__/tool.test.ts.snap +9 -0
  308. package/test/tool/bash.test.ts +55 -0
  309. package/test/tool/patch.test.ts +259 -0
  310. package/test/util/iife.test.ts +36 -0
  311. package/test/util/lazy.test.ts +50 -0
  312. package/test/util/timeout.test.ts +21 -0
  313. package/test/util/wildcard.test.ts +55 -0
  314. package/tsconfig.json +17 -0
package/src/mcp/oauth-callback.ts ADDED
@@ -0,0 +1,203 @@
1
+ import { Log } from "../util/log"
2
+ import { OAUTH_CALLBACK_PORT, OAUTH_CALLBACK_PATH } from "./oauth-provider"
3
+
4
+ const log = Log.create({ service: "mcp.oauth-callback" })
5
+
6
+ const HTML_SUCCESS = `<!DOCTYPE html>
7
+ <html>
8
+ <head>
9
+ <title>OpenCode - Authorization Successful</title>
10
+ <style>
11
+ body { font-family: system-ui, -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #1a1a2e; color: #eee; }
12
+ .container { text-align: center; padding: 2rem; }
13
+ h1 { color: #4ade80; margin-bottom: 1rem; }
14
+ p { color: #aaa; }
15
+ </style>
16
+ </head>
17
+ <body>
18
+ <div class="container">
19
+ <h1>Authorization Successful</h1>
20
+ <p>You can close this window and return to OpenCode.</p>
21
+ </div>
22
+ <script>setTimeout(() => window.close(), 2000);</script>
23
+ </body>
24
+ </html>`
25
+
26
+ const HTML_ERROR = (error: string) => `<!DOCTYPE html>
27
+ <html>
28
+ <head>
29
+ <title>OpenCode - Authorization Failed</title>
30
+ <style>
31
+ body { font-family: system-ui, -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #1a1a2e; color: #eee; }
32
+ .container { text-align: center; padding: 2rem; }
33
+ h1 { color: #f87171; margin-bottom: 1rem; }
34
+ p { color: #aaa; }
35
+ .error { color: #fca5a5; font-family: monospace; margin-top: 1rem; padding: 1rem; background: rgba(248,113,113,0.1); border-radius: 0.5rem; }
36
+ </style>
37
+ </head>
38
+ <body>
39
+ <div class="container">
40
+ <h1>Authorization Failed</h1>
41
+ <p>An error occurred during authorization.</p>
42
+ <div class="error">${error}</div>
43
+ </div>
44
+ </body>
45
+ </html>`
46
+
47
+ interface PendingAuth {
48
+ resolve: (code: string) => void
49
+ reject: (error: Error) => void
50
+ timeout: ReturnType<typeof setTimeout>
51
+ }
52
+
53
+ export namespace McpOAuthCallback {
54
+ let server: ReturnType<typeof Bun.serve> | undefined
55
+ const pendingAuths = new Map<string, PendingAuth>()
56
+
57
+ const CALLBACK_TIMEOUT_MS = 5 * 60 * 1000 // 5 minutes
58
+
59
+ export async function ensureRunning(): Promise<void> {
60
+ if (server) return
61
+
62
+ const running = await isPortInUse()
63
+ if (running) {
64
+ log.info("oauth callback server already running on another instance", { port: OAUTH_CALLBACK_PORT })
65
+ return
66
+ }
67
+
68
+ server = Bun.serve({
69
+ port: OAUTH_CALLBACK_PORT,
70
+ fetch(req) {
71
+ const url = new URL(req.url)
72
+
73
+ if (url.pathname !== OAUTH_CALLBACK_PATH) {
74
+ return new Response("Not found", { status: 404 })
75
+ }
76
+
77
+ const code = url.searchParams.get("code")
78
+ const state = url.searchParams.get("state")
79
+ const error = url.searchParams.get("error")
80
+ const errorDescription = url.searchParams.get("error_description")
81
+
82
+ log.info("received oauth callback", { hasCode: !!code, state, error })
83
+
84
+ if (error) {
85
+ const errorMsg = errorDescription || error
86
+ if (state && pendingAuths.has(state)) {
87
+ const pending = pendingAuths.get(state)!
88
+ clearTimeout(pending.timeout)
89
+ pendingAuths.delete(state)
90
+ pending.reject(new Error(errorMsg))
91
+ }
92
+ return new Response(HTML_ERROR(errorMsg), {
93
+ headers: { "Content-Type": "text/html" },
94
+ })
95
+ }
96
+
97
+ if (!code) {
98
+ return new Response(HTML_ERROR("No authorization code provided"), {
99
+ status: 400,
100
+ headers: { "Content-Type": "text/html" },
101
+ })
102
+ }
103
+
104
+ // Try to find the pending auth by state parameter, or if no state, use the single pending auth
105
+ let pending: PendingAuth | undefined
106
+ let pendingKey: string | undefined
107
+
108
+ if (state && pendingAuths.has(state)) {
109
+ pending = pendingAuths.get(state)!
110
+ pendingKey = state
111
+ } else if (!state && pendingAuths.size === 1) {
112
+ // No state parameter but only one pending auth - use it
113
+ const [key, value] = pendingAuths.entries().next().value as [string, PendingAuth]
114
+ pending = value
115
+ pendingKey = key
116
+ log.info("no state parameter, using single pending auth", { key })
117
+ }
118
+
119
+ if (!pending || !pendingKey) {
120
+ const errorMsg = !state
121
+ ? "No state parameter provided and multiple pending authorizations"
122
+ : "Unknown or expired authorization request"
123
+ return new Response(HTML_ERROR(errorMsg), {
124
+ status: 400,
125
+ headers: { "Content-Type": "text/html" },
126
+ })
127
+ }
128
+
129
+ clearTimeout(pending.timeout)
130
+ pendingAuths.delete(pendingKey)
131
+ pending.resolve(code)
132
+
133
+ return new Response(HTML_SUCCESS, {
134
+ headers: { "Content-Type": "text/html" },
135
+ })
136
+ },
137
+ })
138
+
139
+ log.info("oauth callback server started", { port: OAUTH_CALLBACK_PORT })
140
+ }
141
+
142
+ export function waitForCallback(mcpName: string): Promise<string> {
143
+ return new Promise((resolve, reject) => {
144
+ const timeout = setTimeout(() => {
145
+ if (pendingAuths.has(mcpName)) {
146
+ pendingAuths.delete(mcpName)
147
+ reject(new Error("OAuth callback timeout - authorization took too long"))
148
+ }
149
+ }, CALLBACK_TIMEOUT_MS)
150
+
151
+ pendingAuths.set(mcpName, { resolve, reject, timeout })
152
+ })
153
+ }
154
+
155
+ export function cancelPending(mcpName: string): void {
156
+ const pending = pendingAuths.get(mcpName)
157
+ if (pending) {
158
+ clearTimeout(pending.timeout)
159
+ pendingAuths.delete(mcpName)
160
+ pending.reject(new Error("Authorization cancelled"))
161
+ }
162
+ }
163
+
164
+ export async function isPortInUse(): Promise<boolean> {
165
+ return new Promise((resolve) => {
166
+ Bun.connect({
167
+ hostname: "127.0.0.1",
168
+ port: OAUTH_CALLBACK_PORT,
169
+ socket: {
170
+ open(socket) {
171
+ socket.end()
172
+ resolve(true)
173
+ },
174
+ error() {
175
+ resolve(false)
176
+ },
177
+ data() {},
178
+ close() {},
179
+ },
180
+ }).catch(() => {
181
+ resolve(false)
182
+ })
183
+ })
184
+ }
185
+
186
+ export async function stop(): Promise<void> {
187
+ if (server) {
188
+ server.stop()
189
+ server = undefined
190
+ log.info("oauth callback server stopped")
191
+ }
192
+
193
+ for (const [name, pending] of pendingAuths) {
194
+ clearTimeout(pending.timeout)
195
+ pending.reject(new Error("OAuth callback server stopped"))
196
+ }
197
+ pendingAuths.clear()
198
+ }
199
+
200
+ export function isRunning(): boolean {
201
+ return server !== undefined
202
+ }
203
+ }
package/src/mcp/oauth-provider.ts ADDED
@@ -0,0 +1,132 @@
1
+ import type { OAuthClientProvider } from "@modelcontextprotocol/sdk/client/auth.js"
2
+ import type {
3
+ OAuthClientMetadata,
4
+ OAuthTokens,
5
+ OAuthClientInformation,
6
+ OAuthClientInformationFull,
7
+ } from "@modelcontextprotocol/sdk/shared/auth.js"
8
+ import { McpAuth } from "./auth"
9
+ import { Log } from "../util/log"
10
+
11
+ const log = Log.create({ service: "mcp.oauth" })
12
+
13
+ const OAUTH_CALLBACK_PORT = 19876
14
+ const OAUTH_CALLBACK_PATH = "/mcp/oauth/callback"
15
+
16
+ export interface McpOAuthConfig {
17
+ clientId?: string
18
+ clientSecret?: string
19
+ scope?: string
20
+ }
21
+
22
+ export interface McpOAuthCallbacks {
23
+ onRedirect: (url: URL) => void | Promise<void>
24
+ }
25
+
26
+ export class McpOAuthProvider implements OAuthClientProvider {
27
+ constructor(
28
+ private mcpName: string,
29
+ private serverUrl: string,
30
+ private config: McpOAuthConfig,
31
+ private callbacks: McpOAuthCallbacks,
32
+ ) {}
33
+
34
+ get redirectUrl(): string {
35
+ return `http://127.0.0.1:${OAUTH_CALLBACK_PORT}${OAUTH_CALLBACK_PATH}`
36
+ }
37
+
38
+ get clientMetadata(): OAuthClientMetadata {
39
+ return {
40
+ redirect_uris: [this.redirectUrl],
41
+ client_name: "OpenCode",
42
+ client_uri: "https://opencode.ai",
43
+ grant_types: ["authorization_code", "refresh_token"],
44
+ response_types: ["code"],
45
+ token_endpoint_auth_method: this.config.clientSecret ? "client_secret_post" : "none",
46
+ }
47
+ }
48
+
49
+ async clientInformation(): Promise<OAuthClientInformation | undefined> {
50
+ // Check config first (pre-registered client)
51
+ if (this.config.clientId) {
52
+ return {
53
+ client_id: this.config.clientId,
54
+ client_secret: this.config.clientSecret,
55
+ }
56
+ }
57
+
58
+ // Check stored client info (from dynamic registration)
59
+ const entry = await McpAuth.get(this.mcpName)
60
+ if (entry?.clientInfo) {
61
+ // Check if client secret has expired
62
+ if (entry.clientInfo.clientSecretExpiresAt && entry.clientInfo.clientSecretExpiresAt < Date.now() / 1000) {
63
+ log.info("client secret expired, need to re-register", { mcpName: this.mcpName })
64
+ return undefined
65
+ }
66
+ return {
67
+ client_id: entry.clientInfo.clientId,
68
+ client_secret: entry.clientInfo.clientSecret,
69
+ }
70
+ }
71
+
72
+ // No client info - will trigger dynamic registration
73
+ return undefined
74
+ }
75
+
76
+ async saveClientInformation(info: OAuthClientInformationFull): Promise<void> {
77
+ await McpAuth.updateClientInfo(this.mcpName, {
78
+ clientId: info.client_id,
79
+ clientSecret: info.client_secret,
80
+ clientIdIssuedAt: info.client_id_issued_at,
81
+ clientSecretExpiresAt: info.client_secret_expires_at,
82
+ })
83
+ log.info("saved dynamically registered client", {
84
+ mcpName: this.mcpName,
85
+ clientId: info.client_id,
86
+ })
87
+ }
88
+
89
+ async tokens(): Promise<OAuthTokens | undefined> {
90
+ const entry = await McpAuth.get(this.mcpName)
91
+ if (!entry?.tokens) return undefined
92
+
93
+ return {
94
+ access_token: entry.tokens.accessToken,
95
+ token_type: "Bearer",
96
+ refresh_token: entry.tokens.refreshToken,
97
+ expires_in: entry.tokens.expiresAt
98
+ ? Math.max(0, Math.floor(entry.tokens.expiresAt - Date.now() / 1000))
99
+ : undefined,
100
+ scope: entry.tokens.scope,
101
+ }
102
+ }
103
+
104
+ async saveTokens(tokens: OAuthTokens): Promise<void> {
105
+ await McpAuth.updateTokens(this.mcpName, {
106
+ accessToken: tokens.access_token,
107
+ refreshToken: tokens.refresh_token,
108
+ expiresAt: tokens.expires_in ? Date.now() / 1000 + tokens.expires_in : undefined,
109
+ scope: tokens.scope,
110
+ })
111
+ log.info("saved oauth tokens", { mcpName: this.mcpName })
112
+ }
113
+
114
+ async redirectToAuthorization(authorizationUrl: URL): Promise<void> {
115
+ log.info("redirecting to authorization", { mcpName: this.mcpName, url: authorizationUrl.toString() })
116
+ await this.callbacks.onRedirect(authorizationUrl)
117
+ }
118
+
119
+ async saveCodeVerifier(codeVerifier: string): Promise<void> {
120
+ await McpAuth.updateCodeVerifier(this.mcpName, codeVerifier)
121
+ }
122
+
123
+ async codeVerifier(): Promise<string> {
124
+ const entry = await McpAuth.get(this.mcpName)
125
+ if (!entry?.codeVerifier) {
126
+ throw new Error(`No code verifier saved for MCP server: ${this.mcpName}`)
127
+ }
128
+ return entry.codeVerifier
129
+ }
130
+ }
131
+
132
+ export { OAUTH_CALLBACK_PORT, OAUTH_CALLBACK_PATH }
package/src/notification/index.ts ADDED
@@ -0,0 +1,101 @@
1
+ import { Log } from "@/util/log"
2
+ import { Global } from "@/global"
3
+ import path from "path"
4
+
5
+ const log = Log.create({ service: "notification" })
6
+
7
+ const NOTIFICATION_ENDPOINT = "https://cerebras-code-cli-notifs.kevin-taylor-d8d.workers.dev"
8
+ const SEEN_KEY = "notification.seen"
9
+
10
+ export interface Notification {
11
+ id: string
12
+ type: "info" | "warning" | "critical"
13
+ title: string
14
+ message: string
15
+ display: "toast" | "fullscreen" | "banner"
16
+ expires?: string
17
+ }
18
+
19
+ // Simple KV storage for notifications (outside TUI context)
20
+ async function getKV(): Promise<Record<string, any>> {
21
+ try {
22
+ const file = Bun.file(path.join(Global.Path.state, "kv.json"))
23
+ return await file.json()
24
+ } catch {
25
+ return {}
26
+ }
27
+ }
28
+
29
+ async function setKV(key: string, value: any): Promise<void> {
30
+ const kv = await getKV()
31
+ kv[key] = value
32
+ await Bun.write(path.join(Global.Path.state, "kv.json"), JSON.stringify(kv, null, 2))
33
+ }
34
+
35
+ export namespace Notification {
36
+ /**
37
+ * Fetch the current notification from the server.
38
+ * Returns null if no notification or already seen.
39
+ */
40
+ export async function check(): Promise<Notification | null> {
41
+ try {
42
+ const res = await fetch(NOTIFICATION_ENDPOINT, {
43
+ signal: AbortSignal.timeout(3000), // 3s timeout
44
+ })
45
+
46
+ if (!res.ok) {
47
+ log.debug("notification fetch failed", { status: res.status })
48
+ return null
49
+ }
50
+
51
+ const notification = (await res.json()) as Notification | null
52
+ if (!notification) return null
53
+
54
+ // Check if expired
55
+ if (notification.expires) {
56
+ const expiresAt = new Date(notification.expires)
57
+ if (expiresAt < new Date()) {
58
+ log.debug("notification expired", { id: notification.id })
59
+ return null
60
+ }
61
+ }
62
+
63
+ // Check if already seen
64
+ const seen = await getSeenIds()
65
+ if (seen.includes(notification.id)) {
66
+ log.debug("notification already seen", { id: notification.id })
67
+ return null
68
+ }
69
+
70
+ return notification
71
+ } catch (e) {
72
+ log.debug("notification check error", { error: e })
73
+ return null
74
+ }
75
+ }
76
+
77
+ /**
78
+ * Mark a notification as seen so it won't show again.
79
+ */
80
+ export async function markSeen(id: string): Promise<void> {
81
+ const seen = await getSeenIds()
82
+ if (!seen.includes(id)) {
83
+ seen.push(id)
84
+ const trimmed = seen.slice(-50)
85
+ await setKV(SEEN_KEY, trimmed)
86
+ }
87
+ }
88
+
89
+ async function getSeenIds(): Promise<string[]> {
90
+ const kv = await getKV()
91
+ const raw = kv[SEEN_KEY]
92
+ if (!raw) return []
93
+ if (Array.isArray(raw)) return raw
94
+ try {
95
+ return JSON.parse(raw) as string[]
96
+ } catch {
97
+ return []
98
+ }
99
+ }
100
+ }
101
+