clankerbend 0.1.0 → 0.1.2

package/host/src/index.js

@@ -3,9 +3,9 @@ import http from "node:http";
 import { randomBytes } from "node:crypto";
 import { extname, join, relative, resolve } from "node:path";
 
-export const ONEWHACK_VERSION = "0.1";
+export const CLANKERBEND_VERSION = "0.1";
 
-export class OneWhackHttpError extends Error {
+export class ClankerBendHttpError extends Error {
   constructor(status, code, message, detail) {
     super(message);
     this.status = status;
@@ -15,7 +15,7 @@ export class OneWhackHttpError extends Error {
 }
 
 export function httpError(status, code, message, detail) {
-  return new OneWhackHttpError(status, code, message, detail);
+  return new ClankerBendHttpError(status, code, message, detail);
 }
 
 export function createMockTranscriptAdapter(options = {}) {
@@ -91,15 +91,16 @@ export function mockAnchor(anchorId, order, inferredRole, textPreview) {
   };
 }
 
-export class OneWhackHost {
+export class ClankerBendHost {
   constructor(options = {}) {
-    this.protocolVersion = options.protocolVersion || ONEWHACK_VERSION;
-    this.hostId = options.hostId || "onewill.onewhack.host";
-    this.hostName = options.hostName || "OneWhack Host";
+    this.protocolVersion = options.protocolVersion || CLANKERBEND_VERSION;
+    this.hostId = options.hostId || "onewill.clankerbend.host";
+    this.hostName = options.hostName || "ClankerBend Host";
     this.localDevInsecure = options.localDevInsecure === true;
     this.token = this.localDevInsecure ? "" : (isNonEmptyString(options.token) ? options.token : createSessionToken());
     this.runDir = options.runDir || null;
     this.transcriptAdapter = options.transcriptAdapter || createMockTranscriptAdapter();
+    this.accountRegistry = options.accountRegistry || null;
     this.apps = new Map();
     this.sseClients = new Set();
     this.actionResults = new Map();
@@ -157,6 +158,15 @@ export class OneWhackHost {
         version: null,
         error: "not started"
       },
+      codexAccounts: this.accountRegistry
+        ? {
+            available: true,
+            activeAccountId: null,
+            maxRunningDesktopInstances: 1,
+            switching: false,
+            ...this.accountRegistry.list()
+          }
+        : null,
       lastAction: null
     };
   }
@@ -266,6 +276,11 @@ export class OneWhackHost {
         correlateItems: false,
         approvals: false,
         rollback: false
+      },
+      codexAccounts: {
+        available: Boolean(this.accountRegistry),
+        switch: Boolean(this.transcriptAdapter.switchTo),
+        adoptPrimary: Boolean(this.transcriptAdapter.adoptAsPrimary)
       }
     };
   }
@@ -274,12 +289,12 @@ export class OneWhackHost {
     const app = this.apps.get(appId);
     if (!app || !this.state.host.url) return null;
     const base = `${this.state.host.url.replace(/\/$/, "")}/apps/${encodeURIComponent(app.appId)}/`;
-    return this.token ? `${base}#onewhack_token=${encodeURIComponent(this.token)}` : base;
+    return this.token ? `${base}#clankerbend_token=${encodeURIComponent(this.token)}` : base;
   }
 
   hostManifest() {
     return {
-      oneWhackVersion: this.protocolVersion,
+      clankerbendVersion: this.protocolVersion,
       hostId: this.hostId,
       hostName: this.hostName,
       capabilities: this.capabilities(),
@@ -307,7 +322,7 @@ export class OneWhackHost {
     }
     return cleanObject({
       ...loadedManifest,
-      oneWhackVersion: this.protocolVersion,
+      clankerbendVersion: this.protocolVersion,
       appId: app.appId,
       name: app.name || app.appId,
       version: app.version || loadedManifest.version,
@@ -323,8 +338,9 @@ export class OneWhackHost {
   }
 
   publicState() {
+    if (this.accountRegistry) this.state.codexAccounts = this.accountState();
     return {
-      protocolName: "onewhack",
+      protocolName: "clankerbend",
       protocolVersion: this.protocolVersion,
       sequence: this.state.sequence,
       generatedAt: this.state.generatedAt,
@@ -361,6 +377,7 @@ export class OneWhackHost {
         ...this.appState(app.appId)
       })),
       appServer: this.state.appServer,
+      codexAccounts: this.state.codexAccounts || undefined,
       lastAction: this.state.lastAction || undefined
     };
   }
@@ -481,26 +498,39 @@ export class OneWhackHost {
       res.writeHead(204).end();
       return;
     }
-    if (url.pathname.startsWith("/onewhack/") && !this.authorized(req)) {
-      this.fail(res, 401, "unauthorized", "missing or invalid OneWhack token");
+    if (url.pathname.startsWith("/clankerbend/") && !this.authorized(req)) {
+      this.fail(res, 401, "unauthorized", "missing or invalid ClankerBend token");
       return;
     }
 
-    if (url.pathname === "/onewhack/manifest" && req.method === "GET") return this.ok(res, this.hostManifest());
-    if (url.pathname === "/onewhack/state" && req.method === "GET") return this.ok(res, this.publicState());
-    if (url.pathname === "/onewhack/events" && req.method === "GET") return this.handleEvents(req, res);
-    if (url.pathname === "/onewhack/apps" && req.method === "GET") return this.ok(res, { apps: this.appSummaries() });
-    if (url.pathname === "/onewhack/panel/open" && req.method === "POST") return this.openPanelEndpoint(req, res);
-    if (url.pathname === "/onewhack/transcript/scroll" && req.method === "POST") return this.scrollEndpoint(req, res);
-    if (url.pathname === "/onewhack/transcript/highlight" && req.method === "POST") return this.highlightEndpoint(req, res);
-    if (url.pathname === "/onewhack/transcript/highlight-range" && req.method === "POST") return this.highlightRangeEndpoint(req, res);
-    if (url.pathname === "/onewhack/selection" && req.method === "POST") return this.selectionEndpoint(req, res);
-    if (url.pathname === "/onewhack/overlay/open" && req.method === "POST") return this.overlayOpenEndpoint(req, res);
-    if (url.pathname === "/onewhack/overlay/close" && req.method === "POST") return this.overlayCloseEndpoint(req, res);
-    if (url.pathname === "/onewhack/composer/context" && req.method === "POST") return this.composerContextEndpoint(req, res);
-    if (url.pathname === "/onewhack/composer/context/remove" && req.method === "POST") return this.composerContextRemoveEndpoint(req, res);
-    if (url.pathname === "/onewhack/composer/draft" && req.method === "POST") return this.composerDraftEndpoint(req, res);
-    if (url.pathname === "/onewhack/composer/submit" && req.method === "POST") return this.composerSubmitEndpoint(req, res);
+    if (url.pathname === "/clankerbend/manifest" && req.method === "GET") return this.ok(res, this.hostManifest());
+    if (url.pathname === "/clankerbend/state" && req.method === "GET") return this.ok(res, this.publicState());
+    if (url.pathname === "/clankerbend/events" && req.method === "GET") return this.handleEvents(req, res);
+    if (url.pathname === "/clankerbend/apps" && req.method === "GET") return this.ok(res, { apps: this.appSummaries() });
+    if (url.pathname === "/clankerbend/panel/open" && req.method === "POST") return this.openPanelEndpoint(req, res);
+    if (url.pathname === "/clankerbend/transcript/scroll" && req.method === "POST") return this.scrollEndpoint(req, res);
+    if (url.pathname === "/clankerbend/transcript/highlight" && req.method === "POST") return this.highlightEndpoint(req, res);
+    if (url.pathname === "/clankerbend/transcript/highlight-range" && req.method === "POST") return this.highlightRangeEndpoint(req, res);
+    if (url.pathname === "/clankerbend/selection" && req.method === "POST") return this.selectionEndpoint(req, res);
+    if (url.pathname === "/clankerbend/overlay/open" && req.method === "POST") return this.overlayOpenEndpoint(req, res);
+    if (url.pathname === "/clankerbend/overlay/close" && req.method === "POST") return this.overlayCloseEndpoint(req, res);
+    if (url.pathname === "/clankerbend/composer/context" && req.method === "POST") return this.composerContextEndpoint(req, res);
+    if (url.pathname === "/clankerbend/composer/context/remove" && req.method === "POST") return this.composerContextRemoveEndpoint(req, res);
+    if (url.pathname === "/clankerbend/composer/draft" && req.method === "POST") return this.composerDraftEndpoint(req, res);
+    if (url.pathname === "/clankerbend/composer/submit" && req.method === "POST") return this.composerSubmitEndpoint(req, res);
+    if (url.pathname === "/clankerbend/codex/accounts" && req.method === "GET") return this.codexAccountsListEndpoint(res);
+    if (url.pathname === "/clankerbend/codex/accounts" && req.method === "POST") return this.codexAccountsCreateEndpoint(req, res);
+    if (url.pathname === "/clankerbend/codex/accounts/default" && req.method === "POST") return this.codexAccountsDefaultEndpoint(req, res);
+    if (url.pathname === "/clankerbend/codex/accounts/switch" && req.method === "POST") return this.codexAccountsSwitchEndpoint(req, res);
+    if (url.pathname === "/clankerbend/codex/primary/rollback" && req.method === "POST") return this.codexPrimaryRollbackEndpoint(req, res);
+    const accountRoute = this.parseCodexAccountRoute(url.pathname);
+    if (accountRoute && req.method === "POST" && accountRoute.tail === "/switch") return this.codexAccountSwitchEndpoint(accountRoute.accountId, res);
+    if (accountRoute && req.method === "POST" && accountRoute.tail === "/start") return this.codexAccountSwitchEndpoint(accountRoute.accountId, res);
+    if (accountRoute && req.method === "POST" && accountRoute.tail === "/focus") return this.codexAccountSwitchEndpoint(accountRoute.accountId, res);
+    if (accountRoute && req.method === "POST" && accountRoute.tail === "/set-default") return this.codexAccountSetDefaultEndpoint(accountRoute.accountId, res);
+    if (accountRoute && req.method === "POST" && accountRoute.tail === "/adopt-as-primary") return this.codexAccountAdoptEndpoint(accountRoute.accountId, res);
+    if (accountRoute && req.method === "DELETE") return this.codexAccountDeleteEndpoint(accountRoute.accountId, res);
+    if (accountRoute && req.method === "POST" && accountRoute.tail === "/delete") return this.codexAccountDeleteEndpoint(accountRoute.accountId, res);
 
     const appRoute = this.parseAppRoute(url.pathname);
     if (appRoute && req.method === "GET" && appRoute.tail === "/manifest") return this.ok(res, this.appManifest(appRoute.appId));
@@ -524,7 +554,7 @@ export class OneWhackHost {
   }
 
   parseAppRoute(pathname) {
-    if (!pathname.startsWith("/onewhack/apps/")) return null;
+    if (!pathname.startsWith("/clankerbend/apps/")) return null;
     const parts = pathname.split("/");
     const appId = decodeURIComponent(parts[3] || "");
     if (!appId) return null;
@@ -532,6 +562,107 @@ export class OneWhackHost {
     return { appId, tail: `/${parts.slice(4).join("/")}` };
   }
 
+  parseCodexAccountRoute(pathname) {
+    if (!pathname.startsWith("/clankerbend/codex/accounts/")) return null;
+    const parts = pathname.split("/");
+    const accountId = decodeURIComponent(parts[4] || "");
+    if (!accountId) return null;
+    return { accountId, tail: `/${parts.slice(5).join("/")}` };
+  }
+
+  requireAccountRegistry() {
+    if (!this.accountRegistry) throw httpError(404, "not_found", "Codex account registry is unavailable");
+    return this.accountRegistry;
+  }
+
+  accountState() {
+    if (typeof this.transcriptAdapter.accountState === "function") return this.transcriptAdapter.accountState();
+    return this.accountRegistry ? {
+      available: true,
+      activeAccountId: null,
+      maxRunningDesktopInstances: 1,
+      switching: false,
+      ...this.accountRegistry.list()
+    } : null;
+  }
+
+  codexAccountsListEndpoint(res) {
+    this.requireAccountRegistry();
+    this.state.codexAccounts = this.accountState();
+    return this.ok(res, this.state.codexAccounts);
+  }
+
+  async codexAccountsCreateEndpoint(req, res) {
+    this.requireAccountRegistry();
+    const body = await readJsonObject(req, "account create request body");
+    const result = typeof this.transcriptAdapter.createAccount === "function"
+      ? await this.transcriptAdapter.createAccount(body)
+      : this.accountRegistry.createManaged(body);
+    this.state.codexAccounts = this.accountState();
+    return this.ok(res, result, 201);
+  }
+
+  async codexAccountsDefaultEndpoint(req, res) {
+    const body = await readJsonObject(req, "account default request body");
+    if (!isNonEmptyString(body.accountId)) throw httpError(400, "bad_request", "accountId is required");
+    return this.codexAccountSetDefaultEndpoint(body.accountId, res);
+  }
+
+  async codexAccountsSwitchEndpoint(req, res) {
+    const body = await readJsonObject(req, "account switch request body");
+    if (!isNonEmptyString(body.accountId)) throw httpError(400, "bad_request", "accountId is required");
+    return this.codexAccountSwitchEndpoint(body.accountId, res);
+  }
+
+  async codexAccountSwitchEndpoint(accountId, res) {
+    this.requireAccountRegistry();
+    if (typeof this.transcriptAdapter.switchTo !== "function") {
+      throw httpError(409, "unsupported", "active adapter does not support Codex account switching");
+    }
+    const result = await this.transcriptAdapter.switchTo(accountId);
+    this.state.codexAccounts = this.accountState();
+    return this.ok(res, result);
+  }
+
+  async codexAccountSetDefaultEndpoint(accountId, res) {
+    this.requireAccountRegistry();
+    const result = typeof this.transcriptAdapter.setDefault === "function"
+      ? await this.transcriptAdapter.setDefault(accountId)
+      : this.accountRegistry.setDefault(accountId);
+    this.state.codexAccounts = this.accountState();
+    return this.ok(res, result);
+  }
+
+  async codexAccountAdoptEndpoint(accountId, res) {
+    this.requireAccountRegistry();
+    if (typeof this.transcriptAdapter.adoptAsPrimary !== "function") {
+      throw httpError(409, "unsupported", "active adapter does not support primary adoption");
+    }
+    const result = await this.transcriptAdapter.adoptAsPrimary(accountId);
+    this.state.codexAccounts = this.accountState();
+    return this.ok(res, result);
+  }
+
+  async codexPrimaryRollbackEndpoint(req, res) {
+    this.requireAccountRegistry();
+    const body = await readJsonObject(req, "primary rollback request body");
+    if (typeof this.transcriptAdapter.rollbackPrimary !== "function") {
+      throw httpError(409, "unsupported", "active adapter does not support primary rollback");
+    }
+    const result = await this.transcriptAdapter.rollbackPrimary(body);
+    this.state.codexAccounts = this.accountState();
+    return this.ok(res, result);
+  }
+
+  async codexAccountDeleteEndpoint(accountId, res) {
+    this.requireAccountRegistry();
+    const result = typeof this.transcriptAdapter.deleteAccount === "function"
+      ? await this.transcriptAdapter.deleteAccount(accountId)
+      : this.accountRegistry.deleteManaged(accountId);
+    this.state.codexAccounts = this.accountState();
+    return this.ok(res, result);
+  }
+
   async actionEndpoint(appId, req, res) {
     const app = this.requireApp(appId);
     const body = await readJsonObject(req, "action request body");
@@ -594,7 +725,7 @@ export class OneWhackHost {
         this.state.panel.error = null;
       } else {
         this.state.panel.status = "waiting";
-        this.state.panel.error = result?.error || "Open a Codex thread, then try opening the OneWhack panel again.";
+        this.state.panel.error = result?.error || "Open a Codex thread, then try opening the ClankerBend panel again.";
       }
       this.touchAndBroadcast();
       return this.ok(res, result || { ok: false, error: "panel unavailable" });
@@ -973,10 +1104,17 @@ export class OneWhackHost {
       res.writeHead(404).end("not found");
       return;
     }
-    res.writeHead(200, {
-      "content-type": mimeType(filePath),
+    const contentType = mimeType(filePath);
+    const headers = {
+      "content-type": contentType,
       "cache-control": "no-store"
-    });
+    };
+    if (this.token && contentType.startsWith("text/html")) {
+      res.writeHead(200, headers);
+      res.end(injectAppToken(readFileSync(filePath, "utf8"), this.token));
+      return;
+    }
+    res.writeHead(200, headers);
     createReadStream(filePath).pipe(res);
   }
 
@@ -1023,7 +1161,7 @@ export class OneWhackHost {
 
   applyCors(res) {
     res.setHeader("access-control-allow-origin", "*");
-    res.setHeader("access-control-allow-methods", "GET,POST,OPTIONS");
+    res.setHeader("access-control-allow-methods", "GET,POST,DELETE,OPTIONS");
     res.setHeader("access-control-allow-headers", "authorization,content-type");
   }
 }
@@ -1134,6 +1272,20 @@ export function createSessionToken() {
   return randomBytes(32).toString("base64url");
 }
 
+function injectAppToken(html, token) {
+  const script = `<meta name="clankerbend-token" content="${escapeHtmlAttribute(token)}">\n    <script>window.__CLANKERBEND_TOKEN=${JSON.stringify(token)};</script>`;
+  return /<head[^>]*>/i.test(html)
+    ? html.replace(/<head[^>]*>/i, (match) => `${match}\n    ${script}`)
+    : `${script}\n${html}`;
+}
+
+function escapeHtmlAttribute(value) {
+  return String(value)
+    .replace(/&/g, "&amp;")
+    .replace(/"/g, "&quot;")
+    .replace(/</g, "&lt;");
+}
+
 function requirePermission(app, permission) {
   if (app.permissions?.[permission] === false) {
     throw httpError(403, "forbidden", `${app.appId} lacks ${permission}`);