codex-agent-view 0.4.2 → 0.4.4

package/src/runtime/config.mjs

@@ -1,5 +1,6 @@
 import {
   chmod,
+  link,
   lstat,
   mkdir,
   readFile,
@@ -15,6 +16,9 @@ export const LOOPBACK_HOST = "127.0.0.1";
 export const DEFAULT_PORT = 43127;
 export const MAX_EVENT_BODY_BYTES = 64 * 1024;
 export const RUNTIME_SCHEMA_VERSION = 1;
+export const VIEWER_CREDENTIAL_SCHEMA_VERSION = 1;
+
+const STRONG_TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
 
 export function autoStartPort(env = process.env) {
   const configured = env.CODEX_AGENT_VIEW_AUTO_START_PORT;
@@ -41,10 +45,20 @@ export function runtimeFile(env = process.env) {
   return join(runtimeDirectory(env), "runtime.json");
 }
 
+export function viewerCredentialFile(env = process.env) {
+  return join(runtimeDirectory(env), "viewer-auth.json");
+}
+
 export function createRuntimeToken() {
   return randomBytes(32).toString("base64url");
 }
 
+function assertStrongToken(token, message) {
+  if (typeof token !== "string" || !STRONG_TOKEN_PATTERN.test(token)) {
+    throw new Error(message);
+  }
+}
+
 export async function ensurePrivateDirectory(directory) {
   await rejectSymlink(directory);
   await mkdir(directory, { recursive: true, mode: 0o700 });
@@ -65,6 +79,117 @@ async function rejectSymlink(path) {
   }
 }
 
+async function requireRegularFile(path, description) {
+  const stats = await lstat(path);
+  if (stats.isSymbolicLink()) {
+    throw new Error(`refusing symbolic link ${description}: ${path}`);
+  }
+  if (!stats.isFile()) {
+    throw new Error(`refusing non-regular ${description}: ${path}`);
+  }
+}
+
+export async function readViewerToken(env = process.env) {
+  const path = viewerCredentialFile(env);
+  await rejectSymlink(dirname(path));
+  await requireRegularFile(path, "viewer credential path");
+  const raw = await readFile(path, "utf8");
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    throw new Error("invalid Codex Agent View viewer credential file");
+  }
+  if (
+    value === null ||
+    typeof value !== "object" ||
+    Array.isArray(value) ||
+    value.schema_version !== VIEWER_CREDENTIAL_SCHEMA_VERSION
+  ) {
+    throw new Error("invalid Codex Agent View viewer credential file");
+  }
+  assertStrongToken(
+    value.token,
+    "invalid Codex Agent View viewer credential file",
+  );
+  return value.token;
+}
+
+export async function ensureViewerToken(
+  env = process.env,
+  { seedToken = createRuntimeToken() } = {},
+) {
+  assertStrongToken(seedToken, "invalid Codex Agent View viewer token");
+
+  const path = viewerCredentialFile(env);
+  const directory = dirname(path);
+  await ensurePrivateDirectory(directory);
+
+  try {
+    const token = await readViewerToken(env);
+    await chmod(path, 0o600);
+    return token;
+  } catch (error) {
+    if (error?.code !== "ENOENT") {
+      throw error;
+    }
+  }
+
+  const temporaryPath = join(
+    directory,
+    `.viewer-auth-${process.pid}-${randomBytes(8).toString("hex")}.tmp`,
+  );
+  const serialized = `${JSON.stringify({
+    schema_version: VIEWER_CREDENTIAL_SCHEMA_VERSION,
+    token: seedToken,
+  }, null, 2)}\n`;
+
+  await writeFile(temporaryPath, serialized, {
+    encoding: "utf8",
+    mode: 0o600,
+    flag: "wx",
+  });
+  try {
+    await chmod(temporaryPath, 0o600);
+    try {
+      await link(temporaryPath, path);
+      await chmod(path, 0o600);
+      return seedToken;
+    } catch (error) {
+      if (error?.code !== "EEXIST") {
+        throw error;
+      }
+      const token = await readViewerToken(env);
+      await chmod(path, 0o600);
+      return token;
+    }
+  } finally {
+    await unlink(temporaryPath).catch((error) => {
+      if (error?.code !== "ENOENT") {
+        throw error;
+      }
+    });
+  }
+}
+
+export async function removeViewerToken(expectedToken, env = process.env) {
+  assertStrongToken(expectedToken, "invalid Codex Agent View viewer token");
+  const path = viewerCredentialFile(env);
+  try {
+    const currentToken = await readViewerToken(env);
+    if (currentToken !== expectedToken) {
+      return false;
+    }
+    await unlink(path);
+    return true;
+  } catch (error) {
+    if (error?.code === "ENOENT") {
+      return false;
+    }
+    throw error;
+  }
+}
+
 export async function writeRuntimeInfo(info, env = process.env) {
   const path = runtimeFile(env);
   const directory = dirname(path);
@@ -105,6 +230,12 @@ export async function readRuntimeInfo(env = process.env) {
   ) {
     throw new Error("invalid Codex Agent View runtime file");
   }
+  if (value.viewer_token !== undefined) {
+    assertStrongToken(
+      value.viewer_token,
+      "invalid Codex Agent View runtime file",
+    );
+  }
   return value;
 }
 

package/src/runtime/server.mjs

@@ -90,6 +90,7 @@ export async function startMonitorServer({
   env = process.env,
   store = createMonitorStore(),
   token = createRuntimeToken(),
+  viewerToken = createRuntimeToken(),
   now = Date.now,
 } = {}) {
   if (host !== LOOPBACK_HOST) {
@@ -109,13 +110,20 @@ export async function startMonitorServer({
         return;
       }
 
-      if (requestUrl.pathname.startsWith("/api/") && !hasToken(request, token)) {
-        sendJson(response, 401, { error: "authorization required" });
+      if (
+        request.method === "GET" &&
+        requestUrl.pathname === "/api/state"
+      ) {
+        if (!hasToken(request, token) && !hasToken(request, viewerToken)) {
+          sendJson(response, 401, { error: "authorization required" });
+          return;
+        }
+        sendJson(response, 200, store.getSnapshot());
         return;
       }
 
-      if (request.method === "GET" && requestUrl.pathname === "/api/state") {
-        sendJson(response, 200, store.getSnapshot());
+      if (requestUrl.pathname.startsWith("/api/") && !hasToken(request, token)) {
+        sendJson(response, 401, { error: "authorization required" });
         return;
       }
 
@@ -182,6 +190,7 @@ export async function startMonitorServer({
     host,
     port: address.port,
     token,
+    viewer_token: viewerToken,
     pid: process.pid,
     started_at_ms: now(),
   };
@@ -214,6 +223,6 @@ export async function startMonitorServer({
     runtimeInfo,
     server,
     store,
-    url: `http://${host}:${address.port}/#token=${encodeURIComponent(token)}`,
+    url: `http://${host}:${address.port}/#token=${encodeURIComponent(viewerToken)}`,
   };
 }