codexgpt 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (654) hide show
  1. package/AGENTS.example.md +20 -0
  2. package/CHANGELOG.md +342 -0
  3. package/CHATGPT_PROMPT.md +12 -0
  4. package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
  5. package/CODEX_PROMPT.md +12 -0
  6. package/CONTRIBUTING.md +62 -0
  7. package/DOMAIN_SETUP.md +275 -0
  8. package/FAQ.md +366 -0
  9. package/FAQ_ZH.md +329 -0
  10. package/LICENSE +21 -0
  11. package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
  12. package/README.md +490 -0
  13. package/README_ZH.md +747 -0
  14. package/SECURITY.md +295 -0
  15. package/config.example.env +103 -0
  16. package/dist/access/fullAccessLease.js +148 -0
  17. package/dist/access/fullAccessLease.js.map +1 -0
  18. package/dist/access/protectedRoots.js +122 -0
  19. package/dist/access/protectedRoots.js.map +1 -0
  20. package/dist/access/rootAdmission.js +347 -0
  21. package/dist/access/rootAdmission.js.map +1 -0
  22. package/dist/analysis/cache.js +27 -0
  23. package/dist/analysis/cache.js.map +1 -0
  24. package/dist/analysis/classify.js +102 -0
  25. package/dist/analysis/classify.js.map +1 -0
  26. package/dist/analysis/extract.js +139 -0
  27. package/dist/analysis/extract.js.map +1 -0
  28. package/dist/analysis/graph.js +22 -0
  29. package/dist/analysis/graph.js.map +1 -0
  30. package/dist/analysis/impact.js +167 -0
  31. package/dist/analysis/impact.js.map +1 -0
  32. package/dist/analysis/index.js +215 -0
  33. package/dist/analysis/index.js.map +1 -0
  34. package/dist/analysis/inventory.js +51 -0
  35. package/dist/analysis/inventory.js.map +1 -0
  36. package/dist/analysis/providers.js +24 -0
  37. package/dist/analysis/providers.js.map +1 -0
  38. package/dist/analysis/rank.js +27 -0
  39. package/dist/analysis/rank.js.map +1 -0
  40. package/dist/analysis/types.js +8 -0
  41. package/dist/analysis/types.js.map +1 -0
  42. package/dist/audit/canonicalJson.js +79 -0
  43. package/dist/audit/canonicalJson.js.map +1 -0
  44. package/dist/audit/diagnostics.js +128 -0
  45. package/dist/audit/diagnostics.js.map +1 -0
  46. package/dist/audit/index.js +12 -0
  47. package/dist/audit/index.js.map +1 -0
  48. package/dist/audit/lifecycleV3.js +53 -0
  49. package/dist/audit/lifecycleV3.js.map +1 -0
  50. package/dist/audit/lifecycleV4.js +70 -0
  51. package/dist/audit/lifecycleV4.js.map +1 -0
  52. package/dist/audit/lock.js +195 -0
  53. package/dist/audit/lock.js.map +1 -0
  54. package/dist/audit/queryTool.js +120 -0
  55. package/dist/audit/queryTool.js.map +1 -0
  56. package/dist/audit/runtime.js +48 -0
  57. package/dist/audit/runtime.js.map +1 -0
  58. package/dist/audit/schemas.js +640 -0
  59. package/dist/audit/schemas.js.map +1 -0
  60. package/dist/audit/store.js +1309 -0
  61. package/dist/audit/store.js.map +1 -0
  62. package/dist/audit/transactionParticipant.js +45 -0
  63. package/dist/audit/transactionParticipant.js.map +1 -0
  64. package/dist/audit/types.js +11 -0
  65. package/dist/audit/types.js.map +1 -0
  66. package/dist/auth/audit.js +44 -0
  67. package/dist/auth/audit.js.map +1 -0
  68. package/dist/auth/authorizationStore.js +333 -0
  69. package/dist/auth/authorizationStore.js.map +1 -0
  70. package/dist/auth/challenges.js +25 -0
  71. package/dist/auth/challenges.js.map +1 -0
  72. package/dist/auth/clientStore.js +469 -0
  73. package/dist/auth/clientStore.js.map +1 -0
  74. package/dist/auth/cloudflareConfig.js +112 -0
  75. package/dist/auth/cloudflareConfig.js.map +1 -0
  76. package/dist/auth/configuration.js +167 -0
  77. package/dist/auth/configuration.js.map +1 -0
  78. package/dist/auth/credentialStore.js +65 -0
  79. package/dist/auth/credentialStore.js.map +1 -0
  80. package/dist/auth/deploymentLock.js +220 -0
  81. package/dist/auth/deploymentLock.js.map +1 -0
  82. package/dist/auth/deploymentRegistry.js +149 -0
  83. package/dist/auth/deploymentRegistry.js.map +1 -0
  84. package/dist/auth/errors.js +26 -0
  85. package/dist/auth/errors.js.map +1 -0
  86. package/dist/auth/grantStore.js +307 -0
  87. package/dist/auth/grantStore.js.map +1 -0
  88. package/dist/auth/index.js +39 -0
  89. package/dist/auth/index.js.map +1 -0
  90. package/dist/auth/keyManager.js +148 -0
  91. package/dist/auth/keyManager.js.map +1 -0
  92. package/dist/auth/localAdminSession.js +173 -0
  93. package/dist/auth/localAdminSession.js.map +1 -0
  94. package/dist/auth/metadata.js +69 -0
  95. package/dist/auth/metadata.js.map +1 -0
  96. package/dist/auth/oauthProvider.js +589 -0
  97. package/dist/auth/oauthProvider.js.map +1 -0
  98. package/dist/auth/ownerApproval.js +51 -0
  99. package/dist/auth/ownerApproval.js.map +1 -0
  100. package/dist/auth/policyIdentity.js +189 -0
  101. package/dist/auth/policyIdentity.js.map +1 -0
  102. package/dist/auth/rateLimits.js +66 -0
  103. package/dist/auth/rateLimits.js.map +1 -0
  104. package/dist/auth/recovery.js +275 -0
  105. package/dist/auth/recovery.js.map +1 -0
  106. package/dist/auth/requestContext.js +34 -0
  107. package/dist/auth/requestContext.js.map +1 -0
  108. package/dist/auth/resourceMiddleware.js +147 -0
  109. package/dist/auth/resourceMiddleware.js.map +1 -0
  110. package/dist/auth/runtimeStatus.js +51 -0
  111. package/dist/auth/runtimeStatus.js.map +1 -0
  112. package/dist/auth/schemas.js +84 -0
  113. package/dist/auth/schemas.js.map +1 -0
  114. package/dist/auth/stateStore.js +468 -0
  115. package/dist/auth/stateStore.js.map +1 -0
  116. package/dist/auth/tokenService.js +631 -0
  117. package/dist/auth/tokenService.js.map +1 -0
  118. package/dist/auth/toolSecurity.js +108 -0
  119. package/dist/auth/toolSecurity.js.map +1 -0
  120. package/dist/auth/types.js +6 -0
  121. package/dist/auth/types.js.map +1 -0
  122. package/dist/auth/windowsDpapi.js +193 -0
  123. package/dist/auth/windowsDpapi.js.map +1 -0
  124. package/dist/bashOps.js +292 -0
  125. package/dist/bashOps.js.map +1 -0
  126. package/dist/capabilitiesOps.js +412 -0
  127. package/dist/capabilitiesOps.js.map +1 -0
  128. package/dist/changesets/crypto.js +92 -0
  129. package/dist/changesets/crypto.js.map +1 -0
  130. package/dist/changesets/index.js +9 -0
  131. package/dist/changesets/index.js.map +1 -0
  132. package/dist/changesets/moveStore.js +237 -0
  133. package/dist/changesets/moveStore.js.map +1 -0
  134. package/dist/changesets/moveUndo.js +386 -0
  135. package/dist/changesets/moveUndo.js.map +1 -0
  136. package/dist/changesets/schemas.js +234 -0
  137. package/dist/changesets/schemas.js.map +1 -0
  138. package/dist/changesets/store.js +573 -0
  139. package/dist/changesets/store.js.map +1 -0
  140. package/dist/changesets/types.js +9 -0
  141. package/dist/changesets/types.js.map +1 -0
  142. package/dist/changesets/undo.js +525 -0
  143. package/dist/changesets/undo.js.map +1 -0
  144. package/dist/changesets/unifiedUndo.js +31 -0
  145. package/dist/changesets/unifiedUndo.js.map +1 -0
  146. package/dist/cliEnvironment.js +85 -0
  147. package/dist/cliEnvironment.js.map +1 -0
  148. package/dist/codexSessions.js +733 -0
  149. package/dist/codexSessions.js.map +1 -0
  150. package/dist/codexgptSupertool.js +216 -0
  151. package/dist/codexgptSupertool.js.map +1 -0
  152. package/dist/codexproSupertool.js +204 -0
  153. package/dist/codexproSupertool.js.map +1 -0
  154. package/dist/config.js +733 -0
  155. package/dist/config.js.map +1 -0
  156. package/dist/control/localApprovalClient.js +287 -0
  157. package/dist/control/localApprovalClient.js.map +1 -0
  158. package/dist/control/localApprovalServer.js +466 -0
  159. package/dist/control/localApprovalServer.js.map +1 -0
  160. package/dist/control/runtime.js +178 -0
  161. package/dist/control/runtime.js.map +1 -0
  162. package/dist/control/schemas.js +184 -0
  163. package/dist/control/schemas.js.map +1 -0
  164. package/dist/control/windowsLocalControl.js +348 -0
  165. package/dist/control/windowsLocalControl.js.map +1 -0
  166. package/dist/fsOps.js +541 -0
  167. package/dist/fsOps.js.map +1 -0
  168. package/dist/git/admission.js +26 -0
  169. package/dist/git/admission.js.map +1 -0
  170. package/dist/git/branchService.js +51 -0
  171. package/dist/git/branchService.js.map +1 -0
  172. package/dist/git/capabilities.js +143 -0
  173. package/dist/git/capabilities.js.map +1 -0
  174. package/dist/git/commitService.js +344 -0
  175. package/dist/git/commitService.js.map +1 -0
  176. package/dist/git/durableState.js +151 -0
  177. package/dist/git/durableState.js.map +1 -0
  178. package/dist/git/execution.js +451 -0
  179. package/dist/git/execution.js.map +1 -0
  180. package/dist/git/fileTransaction.js +50 -0
  181. package/dist/git/fileTransaction.js.map +1 -0
  182. package/dist/git/indexService.js +421 -0
  183. package/dist/git/indexService.js.map +1 -0
  184. package/dist/git/integrations.js +653 -0
  185. package/dist/git/integrations.js.map +1 -0
  186. package/dist/git/locks.js +287 -0
  187. package/dist/git/locks.js.map +1 -0
  188. package/dist/git/mutationContext.js +92 -0
  189. package/dist/git/mutationContext.js.map +1 -0
  190. package/dist/git/mutationJournal.js +91 -0
  191. package/dist/git/mutationJournal.js.map +1 -0
  192. package/dist/git/mutationService.js +352 -0
  193. package/dist/git/mutationService.js.map +1 -0
  194. package/dist/git/normalization.js +57 -0
  195. package/dist/git/normalization.js.map +1 -0
  196. package/dist/git/objectQuarantine.js +243 -0
  197. package/dist/git/objectQuarantine.js.map +1 -0
  198. package/dist/git/opaqueRecordStore.js +187 -0
  199. package/dist/git/opaqueRecordStore.js.map +1 -0
  200. package/dist/git/operationStore.js +287 -0
  201. package/dist/git/operationStore.js.map +1 -0
  202. package/dist/git/parsers.js +311 -0
  203. package/dist/git/parsers.js.map +1 -0
  204. package/dist/git/privateIndex.js +79 -0
  205. package/dist/git/privateIndex.js.map +1 -0
  206. package/dist/git/productionBootstrap.js +39 -0
  207. package/dist/git/productionBootstrap.js.map +1 -0
  208. package/dist/git/readService.js +846 -0
  209. package/dist/git/readService.js.map +1 -0
  210. package/dist/git/recovery.js +417 -0
  211. package/dist/git/recovery.js.map +1 -0
  212. package/dist/git/repositoryIdentity.js +611 -0
  213. package/dist/git/repositoryIdentity.js.map +1 -0
  214. package/dist/git/repositoryStore.js +237 -0
  215. package/dist/git/repositoryStore.js.map +1 -0
  216. package/dist/git/resources.js +113 -0
  217. package/dist/git/resources.js.map +1 -0
  218. package/dist/git/restoreService.js +178 -0
  219. package/dist/git/restoreService.js.map +1 -0
  220. package/dist/git/reviewToken.js +86 -0
  221. package/dist/git/reviewToken.js.map +1 -0
  222. package/dist/git/stashService.js +566 -0
  223. package/dist/git/stashService.js.map +1 -0
  224. package/dist/git/stateToken.js +139 -0
  225. package/dist/git/stateToken.js.map +1 -0
  226. package/dist/gitOps.js +147 -0
  227. package/dist/gitOps.js.map +1 -0
  228. package/dist/guard.js +608 -0
  229. package/dist/guard.js.map +1 -0
  230. package/dist/guidance/diagnostics.js +14 -0
  231. package/dist/guidance/diagnostics.js.map +1 -0
  232. package/dist/guidance/instructions.js +167 -0
  233. package/dist/guidance/instructions.js.map +1 -0
  234. package/dist/guidance/mode.js +18 -0
  235. package/dist/guidance/mode.js.map +1 -0
  236. package/dist/guidance/openaiSkillMetadata.js +29 -0
  237. package/dist/guidance/openaiSkillMetadata.js.map +1 -0
  238. package/dist/guidance/safeTextReader.js +171 -0
  239. package/dist/guidance/safeTextReader.js.map +1 -0
  240. package/dist/guidance/skillCatalog.js +70 -0
  241. package/dist/guidance/skillCatalog.js.map +1 -0
  242. package/dist/guidance/skillDiscovery.js +353 -0
  243. package/dist/guidance/skillDiscovery.js.map +1 -0
  244. package/dist/guidance/skillMetadata.js +115 -0
  245. package/dist/guidance/skillMetadata.js.map +1 -0
  246. package/dist/guidance/skillResources.js +146 -0
  247. package/dist/guidance/skillResources.js.map +1 -0
  248. package/dist/handoffOps.js +449 -0
  249. package/dist/handoffOps.js.map +1 -0
  250. package/dist/http/localAdminApp.js +203 -0
  251. package/dist/http/localAdminApp.js.map +1 -0
  252. package/dist/http/oauthMcpRuntime.js +294 -0
  253. package/dist/http/oauthMcpRuntime.js.map +1 -0
  254. package/dist/http/publicApp.js +350 -0
  255. package/dist/http/publicApp.js.map +1 -0
  256. package/dist/http/securityHeaders.js +11 -0
  257. package/dist/http/securityHeaders.js.map +1 -0
  258. package/dist/http.js +2076 -0
  259. package/dist/http.js.map +1 -0
  260. package/dist/moves/engine.js +1079 -0
  261. package/dist/moves/engine.js.map +1 -0
  262. package/dist/moves/index.js +6 -0
  263. package/dist/moves/index.js.map +1 -0
  264. package/dist/moves/planner.js +270 -0
  265. package/dist/moves/planner.js.map +1 -0
  266. package/dist/moves/recovery.js +557 -0
  267. package/dist/moves/recovery.js.map +1 -0
  268. package/dist/moves/service.js +300 -0
  269. package/dist/moves/service.js.map +1 -0
  270. package/dist/moves/types.js +11 -0
  271. package/dist/moves/types.js.map +1 -0
  272. package/dist/mutations/index.js +4 -0
  273. package/dist/mutations/index.js.map +1 -0
  274. package/dist/mutations/lifecycle.js +165 -0
  275. package/dist/mutations/lifecycle.js.map +1 -0
  276. package/dist/mutations/localService.js +163 -0
  277. package/dist/mutations/localService.js.map +1 -0
  278. package/dist/mutations/runtime.js +322 -0
  279. package/dist/mutations/runtime.js.map +1 -0
  280. package/dist/mutations/types.js +2 -0
  281. package/dist/mutations/types.js.map +1 -0
  282. package/dist/mutations/writers.js +360 -0
  283. package/dist/mutations/writers.js.map +1 -0
  284. package/dist/patchOps.js +420 -0
  285. package/dist/patchOps.js.map +1 -0
  286. package/dist/policy/approval.js +306 -0
  287. package/dist/policy/approval.js.map +1 -0
  288. package/dist/policy/audit.js +88 -0
  289. package/dist/policy/audit.js.map +1 -0
  290. package/dist/policy/authorizationFacts.js +187 -0
  291. package/dist/policy/authorizationFacts.js.map +1 -0
  292. package/dist/policy/compat.js +104 -0
  293. package/dist/policy/compat.js.map +1 -0
  294. package/dist/policy/context.js +31 -0
  295. package/dist/policy/context.js.map +1 -0
  296. package/dist/policy/enforcement.js +46 -0
  297. package/dist/policy/enforcement.js.map +1 -0
  298. package/dist/policy/evaluator.js +338 -0
  299. package/dist/policy/evaluator.js.map +1 -0
  300. package/dist/policy/executionCapabilities.js +80 -0
  301. package/dist/policy/executionCapabilities.js.map +1 -0
  302. package/dist/policy/executionResources.js +192 -0
  303. package/dist/policy/executionResources.js.map +1 -0
  304. package/dist/policy/fullAccessResources.js +23 -0
  305. package/dist/policy/fullAccessResources.js.map +1 -0
  306. package/dist/policy/hardPolicy.js +50 -0
  307. package/dist/policy/hardPolicy.js.map +1 -0
  308. package/dist/policy/identity.js +142 -0
  309. package/dist/policy/identity.js.map +1 -0
  310. package/dist/policy/integration.js +331 -0
  311. package/dist/policy/integration.js.map +1 -0
  312. package/dist/policy/pendingApprovals.js +301 -0
  313. package/dist/policy/pendingApprovals.js.map +1 -0
  314. package/dist/policy/profileStore.js +367 -0
  315. package/dist/policy/profileStore.js.map +1 -0
  316. package/dist/policy/resources.js +249 -0
  317. package/dist/policy/resources.js.map +1 -0
  318. package/dist/policy/runtime.js +713 -0
  319. package/dist/policy/runtime.js.map +1 -0
  320. package/dist/policy/schemas.js +625 -0
  321. package/dist/policy/schemas.js.map +1 -0
  322. package/dist/policy/toolPolicy.js +141 -0
  323. package/dist/policy/toolPolicy.js.map +1 -0
  324. package/dist/policy/transport.js +10 -0
  325. package/dist/policy/transport.js.map +1 -0
  326. package/dist/policy/types.js +31 -0
  327. package/dist/policy/types.js.map +1 -0
  328. package/dist/proContext.js +675 -0
  329. package/dist/proContext.js.map +1 -0
  330. package/dist/process/authority.js +18 -0
  331. package/dist/process/authority.js.map +1 -0
  332. package/dist/process/backendDiscovery.js +83 -0
  333. package/dist/process/backendDiscovery.js.map +1 -0
  334. package/dist/process/commandCompiler.js +71 -0
  335. package/dist/process/commandCompiler.js.map +1 -0
  336. package/dist/process/outputCursor.js +67 -0
  337. package/dist/process/outputCursor.js.map +1 -0
  338. package/dist/process/outputQuota.js +94 -0
  339. package/dist/process/outputQuota.js.map +1 -0
  340. package/dist/process/outputRing.js +138 -0
  341. package/dist/process/outputRing.js.map +1 -0
  342. package/dist/process/processAuditCoordinator.js +52 -0
  343. package/dist/process/processAuditCoordinator.js.map +1 -0
  344. package/dist/process/processManager.js +311 -0
  345. package/dist/process/processManager.js.map +1 -0
  346. package/dist/process/runCommand.js +332 -0
  347. package/dist/process/runCommand.js.map +1 -0
  348. package/dist/process/streamingRedactor.js +105 -0
  349. package/dist/process/streamingRedactor.js.map +1 -0
  350. package/dist/process/types.js +2 -0
  351. package/dist/process/types.js.map +1 -0
  352. package/dist/process/windowsHostClient.js +604 -0
  353. package/dist/process/windowsHostClient.js.map +1 -0
  354. package/dist/process/windowsHostProtocol.js +270 -0
  355. package/dist/process/windowsHostProtocol.js.map +1 -0
  356. package/dist/process/windowsPersistentBackend.js +263 -0
  357. package/dist/process/windowsPersistentBackend.js.map +1 -0
  358. package/dist/productionRuntime.js +907 -0
  359. package/dist/productionRuntime.js.map +1 -0
  360. package/dist/profileStore.js +231 -0
  361. package/dist/profileStore.js.map +1 -0
  362. package/dist/redact.js +124 -0
  363. package/dist/redact.js.map +1 -0
  364. package/dist/searchOps.js +186 -0
  365. package/dist/searchOps.js.map +1 -0
  366. package/dist/selfTestOps.js +786 -0
  367. package/dist/selfTestOps.js.map +1 -0
  368. package/dist/semantic/budgets.js +12 -0
  369. package/dist/semantic/budgets.js.map +1 -0
  370. package/dist/semantic/builtin/typescriptAssets.js +68 -0
  371. package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
  372. package/dist/semantic/builtin/typescriptProvider.js +211 -0
  373. package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
  374. package/dist/semantic/builtin/typescriptWorker.js +365 -0
  375. package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
  376. package/dist/semantic/diffPreview.js +36 -0
  377. package/dist/semantic/diffPreview.js.map +1 -0
  378. package/dist/semantic/index.js +11 -0
  379. package/dist/semantic/index.js.map +1 -0
  380. package/dist/semantic/manager.js +522 -0
  381. package/dist/semantic/manager.js.map +1 -0
  382. package/dist/semantic/positions.js +86 -0
  383. package/dist/semantic/positions.js.map +1 -0
  384. package/dist/semantic/previewStore.js +276 -0
  385. package/dist/semantic/previewStore.js.map +1 -0
  386. package/dist/semantic/projectResolver.js +309 -0
  387. package/dist/semantic/projectResolver.js.map +1 -0
  388. package/dist/semantic/sourceSnapshot.js +54 -0
  389. package/dist/semantic/sourceSnapshot.js.map +1 -0
  390. package/dist/semantic/status.js +46 -0
  391. package/dist/semantic/status.js.map +1 -0
  392. package/dist/semantic/types.js +2 -0
  393. package/dist/semantic/types.js.map +1 -0
  394. package/dist/server.js +8676 -0
  395. package/dist/server.js.map +1 -0
  396. package/dist/stdio.js +64 -0
  397. package/dist/stdio.js.map +1 -0
  398. package/dist/toolCardWidget.js +2000 -0
  399. package/dist/toolCardWidget.js.map +1 -0
  400. package/dist/tools/contracts/catalog.js +111 -0
  401. package/dist/tools/contracts/catalog.js.map +1 -0
  402. package/dist/tools/contracts/index.js +8 -0
  403. package/dist/tools/contracts/index.js.map +1 -0
  404. package/dist/tools/contracts/registration.js +27 -0
  405. package/dist/tools/contracts/registration.js.map +1 -0
  406. package/dist/tools/contracts/schemas.js +11 -0
  407. package/dist/tools/contracts/schemas.js.map +1 -0
  408. package/dist/tools/contracts/types.js +2 -0
  409. package/dist/tools/contracts/types.js.map +1 -0
  410. package/dist/tools/contracts/v3.js +76 -0
  411. package/dist/tools/contracts/v3.js.map +1 -0
  412. package/dist/tools/contracts/v4.js +39 -0
  413. package/dist/tools/contracts/v4.js.map +1 -0
  414. package/dist/tools/contracts/v5.js +20 -0
  415. package/dist/tools/contracts/v5.js.map +1 -0
  416. package/dist/tools/phase3dServer.js +350 -0
  417. package/dist/tools/phase3dServer.js.map +1 -0
  418. package/dist/tools/schemas/applyPatch.js +388 -0
  419. package/dist/tools/schemas/applyPatch.js.map +1 -0
  420. package/dist/tools/schemas/bash.js +202 -0
  421. package/dist/tools/schemas/bash.js.map +1 -0
  422. package/dist/tools/schemas/closeWorkspace.js +105 -0
  423. package/dist/tools/schemas/closeWorkspace.js.map +1 -0
  424. package/dist/tools/schemas/codexContext.js +402 -0
  425. package/dist/tools/schemas/codexContext.js.map +1 -0
  426. package/dist/tools/schemas/codexSessions.js +328 -0
  427. package/dist/tools/schemas/codexSessions.js.map +1 -0
  428. package/dist/tools/schemas/codexgpt.js +1068 -0
  429. package/dist/tools/schemas/codexgpt.js.map +1 -0
  430. package/dist/tools/schemas/codexgptInventory.js +359 -0
  431. package/dist/tools/schemas/codexgptInventory.js.map +1 -0
  432. package/dist/tools/schemas/codexgptSelfTest.js +563 -0
  433. package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
  434. package/dist/tools/schemas/codexpro.js +917 -0
  435. package/dist/tools/schemas/codexpro.js.map +1 -0
  436. package/dist/tools/schemas/codexproInventory.js +352 -0
  437. package/dist/tools/schemas/codexproInventory.js.map +1 -0
  438. package/dist/tools/schemas/codexproSelfTest.js +546 -0
  439. package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
  440. package/dist/tools/schemas/common.js +21 -0
  441. package/dist/tools/schemas/common.js.map +1 -0
  442. package/dist/tools/schemas/createTaskWorktree.js +51 -0
  443. package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
  444. package/dist/tools/schemas/edit.js +321 -0
  445. package/dist/tools/schemas/edit.js.map +1 -0
  446. package/dist/tools/schemas/execution.js +330 -0
  447. package/dist/tools/schemas/execution.js.map +1 -0
  448. package/dist/tools/schemas/exportProContext.js +370 -0
  449. package/dist/tools/schemas/exportProContext.js.map +1 -0
  450. package/dist/tools/schemas/getTaskWorktree.js +19 -0
  451. package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
  452. package/dist/tools/schemas/gitBranch.js +42 -0
  453. package/dist/tools/schemas/gitBranch.js.map +1 -0
  454. package/dist/tools/schemas/gitCommit.js +40 -0
  455. package/dist/tools/schemas/gitCommit.js.map +1 -0
  456. package/dist/tools/schemas/gitCreateBranch.js +22 -0
  457. package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
  458. package/dist/tools/schemas/gitDiff.js +222 -0
  459. package/dist/tools/schemas/gitDiff.js.map +1 -0
  460. package/dist/tools/schemas/gitLog.js +41 -0
  461. package/dist/tools/schemas/gitLog.js.map +1 -0
  462. package/dist/tools/schemas/gitRestore.js +47 -0
  463. package/dist/tools/schemas/gitRestore.js.map +1 -0
  464. package/dist/tools/schemas/gitStage.js +33 -0
  465. package/dist/tools/schemas/gitStage.js.map +1 -0
  466. package/dist/tools/schemas/gitStash.js +102 -0
  467. package/dist/tools/schemas/gitStash.js.map +1 -0
  468. package/dist/tools/schemas/gitStatus.js +226 -0
  469. package/dist/tools/schemas/gitStatus.js.map +1 -0
  470. package/dist/tools/schemas/gitV4Common.js +205 -0
  471. package/dist/tools/schemas/gitV4Common.js.map +1 -0
  472. package/dist/tools/schemas/guidance.js +40 -0
  473. package/dist/tools/schemas/guidance.js.map +1 -0
  474. package/dist/tools/schemas/handoffToAgent.js +276 -0
  475. package/dist/tools/schemas/handoffToAgent.js.map +1 -0
  476. package/dist/tools/schemas/handoffToCodex.js +137 -0
  477. package/dist/tools/schemas/handoffToCodex.js.map +1 -0
  478. package/dist/tools/schemas/inspectWorkspace.js +379 -0
  479. package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
  480. package/dist/tools/schemas/listTaskWorktrees.js +21 -0
  481. package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
  482. package/dist/tools/schemas/listWorkspaces.js +134 -0
  483. package/dist/tools/schemas/listWorkspaces.js.map +1 -0
  484. package/dist/tools/schemas/loadSkill.js +619 -0
  485. package/dist/tools/schemas/loadSkill.js.map +1 -0
  486. package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
  487. package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
  488. package/dist/tools/schemas/movePaths.js +175 -0
  489. package/dist/tools/schemas/movePaths.js.map +1 -0
  490. package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
  491. package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
  492. package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
  493. package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
  494. package/dist/tools/schemas/openWorkspace.js +193 -0
  495. package/dist/tools/schemas/openWorkspace.js.map +1 -0
  496. package/dist/tools/schemas/queryAuditEvents.js +193 -0
  497. package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
  498. package/dist/tools/schemas/read.js +199 -0
  499. package/dist/tools/schemas/read.js.map +1 -0
  500. package/dist/tools/schemas/readCodexSession.js +353 -0
  501. package/dist/tools/schemas/readCodexSession.js.map +1 -0
  502. package/dist/tools/schemas/readHandoff.js +446 -0
  503. package/dist/tools/schemas/readHandoff.js.map +1 -0
  504. package/dist/tools/schemas/removeTaskWorktree.js +40 -0
  505. package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
  506. package/dist/tools/schemas/search.js +235 -0
  507. package/dist/tools/schemas/search.js.map +1 -0
  508. package/dist/tools/schemas/semantic.js +195 -0
  509. package/dist/tools/schemas/semantic.js.map +1 -0
  510. package/dist/tools/schemas/serverConfig.js +157 -0
  511. package/dist/tools/schemas/serverConfig.js.map +1 -0
  512. package/dist/tools/schemas/showChanges.js +283 -0
  513. package/dist/tools/schemas/showChanges.js.map +1 -0
  514. package/dist/tools/schemas/transactionResult.js +11 -0
  515. package/dist/tools/schemas/transactionResult.js.map +1 -0
  516. package/dist/tools/schemas/tree.js +136 -0
  517. package/dist/tools/schemas/tree.js.map +1 -0
  518. package/dist/tools/schemas/undoChangeSet.js +152 -0
  519. package/dist/tools/schemas/undoChangeSet.js.map +1 -0
  520. package/dist/tools/schemas/waitForHandoff.js +462 -0
  521. package/dist/tools/schemas/waitForHandoff.js.map +1 -0
  522. package/dist/tools/schemas/workspaceSnapshot.js +145 -0
  523. package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
  524. package/dist/tools/schemas/write.js +285 -0
  525. package/dist/tools/schemas/write.js.map +1 -0
  526. package/dist/transactions/atomicFs.js +438 -0
  527. package/dist/transactions/atomicFs.js.map +1 -0
  528. package/dist/transactions/atomicStateFile.js +190 -0
  529. package/dist/transactions/atomicStateFile.js.map +1 -0
  530. package/dist/transactions/engine.js +574 -0
  531. package/dist/transactions/engine.js.map +1 -0
  532. package/dist/transactions/index.js +12 -0
  533. package/dist/transactions/index.js.map +1 -0
  534. package/dist/transactions/installation.js +158 -0
  535. package/dist/transactions/installation.js.map +1 -0
  536. package/dist/transactions/manifestV2Store.js +96 -0
  537. package/dist/transactions/manifestV2Store.js.map +1 -0
  538. package/dist/transactions/participantRecovery.js +98 -0
  539. package/dist/transactions/participantRecovery.js.map +1 -0
  540. package/dist/transactions/recovery.js +513 -0
  541. package/dist/transactions/recovery.js.map +1 -0
  542. package/dist/transactions/schemas.js +365 -0
  543. package/dist/transactions/schemas.js.map +1 -0
  544. package/dist/transactions/stateRoot.js +63 -0
  545. package/dist/transactions/stateRoot.js.map +1 -0
  546. package/dist/transactions/types.js +11 -0
  547. package/dist/transactions/types.js.map +1 -0
  548. package/dist/transactions/workspaceLock.js +201 -0
  549. package/dist/transactions/workspaceLock.js.map +1 -0
  550. package/dist/workspaceOps.js +924 -0
  551. package/dist/workspaceOps.js.map +1 -0
  552. package/dist/worktrees/candidateWorkspace.js +566 -0
  553. package/dist/worktrees/candidateWorkspace.js.map +1 -0
  554. package/dist/worktrees/manager.js +258 -0
  555. package/dist/worktrees/manager.js.map +1 -0
  556. package/dist/worktrees/materializer.js +60 -0
  557. package/dist/worktrees/materializer.js.map +1 -0
  558. package/dist/worktrees/mergeExecute.js +498 -0
  559. package/dist/worktrees/mergeExecute.js.map +1 -0
  560. package/dist/worktrees/mergePlanStore.js +247 -0
  561. package/dist/worktrees/mergePlanStore.js.map +1 -0
  562. package/dist/worktrees/mergePrepare.js +709 -0
  563. package/dist/worktrees/mergePrepare.js.map +1 -0
  564. package/dist/worktrees/recovery.js +294 -0
  565. package/dist/worktrees/recovery.js.map +1 -0
  566. package/dist/worktrees/remove.js +296 -0
  567. package/dist/worktrees/remove.js.map +1 -0
  568. package/dist/worktrees/remover.js +57 -0
  569. package/dist/worktrees/remover.js.map +1 -0
  570. package/dist/worktrees/root.js +47 -0
  571. package/dist/worktrees/root.js.map +1 -0
  572. package/dist/worktrees/service.js +245 -0
  573. package/dist/worktrees/service.js.map +1 -0
  574. package/dist/worktrees/store.js +156 -0
  575. package/dist/worktrees/store.js.map +1 -0
  576. package/dist/worktrees/treeManifest.js +106 -0
  577. package/dist/worktrees/treeManifest.js.map +1 -0
  578. package/dist/worktrees/verificationReceipts.js +215 -0
  579. package/dist/worktrees/verificationReceipts.js.map +1 -0
  580. package/dist/worktrees/verificationTerminal.js +23 -0
  581. package/dist/worktrees/verificationTerminal.js.map +1 -0
  582. package/dist/worktrees/workspaceAuthority.js +64 -0
  583. package/dist/worktrees/workspaceAuthority.js.map +1 -0
  584. package/docs/favicon.svg +5 -0
  585. package/docs/index.html +624 -0
  586. package/docs/og.svg +52 -0
  587. package/docs/script.js +33 -0
  588. package/docs/star.svg +11 -0
  589. package/docs/styles.css +1571 -0
  590. package/docs/zh.html +428 -0
  591. package/package.json +121 -0
  592. package/scripts/analysis-cli-smoke.mjs +81 -0
  593. package/scripts/analysis-smoke.mjs +179 -0
  594. package/scripts/atomic-file.mjs +137 -0
  595. package/scripts/ci-change-classifier.mjs +59 -0
  596. package/scripts/ci-failure-summary.mjs +92 -0
  597. package/scripts/cloudflared-installer.mjs +215 -0
  598. package/scripts/cloudflared-release.mjs +63 -0
  599. package/scripts/codexgpt-entry.mjs +235 -0
  600. package/scripts/codexgpt.mjs +4987 -0
  601. package/scripts/connector-auth-output-shim.cjs +66 -0
  602. package/scripts/doctor-smoke.mjs +90 -0
  603. package/scripts/doctor.mjs +165 -0
  604. package/scripts/exact-head-ci.mjs +126 -0
  605. package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
  606. package/scripts/execute-handoff-smoke.mjs +1117 -0
  607. package/scripts/g8-u-live-probe.mjs +208 -0
  608. package/scripts/http-smoke-compat.mjs +151 -0
  609. package/scripts/http-smoke.mjs +776 -0
  610. package/scripts/long-task-runner.mjs +1037 -0
  611. package/scripts/oauth-admin.mjs +1608 -0
  612. package/scripts/output-bounds.mjs +29 -0
  613. package/scripts/owned-temp-root.d.mts +50 -0
  614. package/scripts/owned-temp-root.mjs +567 -0
  615. package/scripts/phase-4a-smoke.mjs +36 -0
  616. package/scripts/policy-windows-spike.mjs +135 -0
  617. package/scripts/pro-apply.mjs +152 -0
  618. package/scripts/pro-bundle.mjs +121 -0
  619. package/scripts/pro-smoke.mjs +97 -0
  620. package/scripts/process-identity.mjs +67 -0
  621. package/scripts/repository-policy.mjs +166 -0
  622. package/scripts/run-and-summarize.mjs +134 -0
  623. package/scripts/run-smoke.mjs +52 -0
  624. package/scripts/run-with-cleanup.mjs +98 -0
  625. package/scripts/settings-smoke-platform-compat.mjs +85 -0
  626. package/scripts/settings-smoke.mjs +769 -0
  627. package/scripts/smoke-platform-compat.mjs +302 -0
  628. package/scripts/smoke.mjs +1180 -0
  629. package/scripts/stress-contract-compat.mjs +94 -0
  630. package/scripts/stress.mjs +882 -0
  631. package/scripts/test-domains.mjs +247 -0
  632. package/scripts/test-execution-profile-manifest.mjs +273 -0
  633. package/scripts/test-execution-profiles.mjs +147 -0
  634. package/scripts/test-performance-reporter.mjs +291 -0
  635. package/scripts/toolchain-manager.mjs +266 -0
  636. package/scripts/toolchains.json +19 -0
  637. package/scripts/windows-conpty-probe-child.mjs +82 -0
  638. package/scripts/windows-conpty-worker.ps1 +24 -0
  639. package/scripts/windows-credential-host-manifest.json +16 -0
  640. package/scripts/windows-credential-host-protocol-v1.json +16 -0
  641. package/scripts/windows-credential-host.cs +256 -0
  642. package/scripts/windows-credential-host.ps1 +26 -0
  643. package/scripts/windows-local-control-manifest.json +23 -0
  644. package/scripts/windows-local-control-spike.cs +738 -0
  645. package/scripts/windows-local-control-spike.mjs +415 -0
  646. package/scripts/windows-local-control-spike.ps1 +35 -0
  647. package/scripts/windows-local-control.cs +738 -0
  648. package/scripts/windows-local-control.ps1 +35 -0
  649. package/scripts/windows-native-api-inventory-v1.json +90 -0
  650. package/scripts/windows-process-host-manifest.json +20 -0
  651. package/scripts/windows-process-host-protocol-v1.json +59 -0
  652. package/scripts/windows-process-host.cs +2385 -0
  653. package/scripts/windows-process-host.ps1 +59 -0
  654. package/scripts/windows-realpath-shim.cjs +78 -0
package/dist/http/localAdminApp.js ADDED
@@ -0,0 +1,203 @@
1
+ import express from "express";
2
+ import { LOCAL_ADMIN_COOKIE_NAME, parseLocalAdminCookie } from "../auth/localAdminSession.js";
3
+ import { applyBaseSecurityHeaders, applyNoStore } from "./securityHeaders.js";
4
+ function unavailable() {
5
+ throw Object.assign(new Error("OAUTH_ADMIN_UNAVAILABLE: OAuth owner control is not running."), {
6
+ code: "OAUTH_ADMIN_UNAVAILABLE"
7
+ });
8
+ }
9
+ export function createLocalControlOwnerAdminService(runtime, sessions, origin) {
10
+ const request = async (operation, input = {}) => {
11
+ if (!runtime?.nativeControl())
12
+ unavailable();
13
+ return await runtime.server.handle({
14
+ schemaVersion: 3,
15
+ contractVersion: 3,
16
+ operation,
17
+ serverId: runtime.serverId,
18
+ ...input
19
+ });
20
+ };
21
+ return Object.freeze({
22
+ kind: "local-control-cli",
23
+ isAvailable: () => Boolean(runtime?.nativeControl()),
24
+ issueBootstrap: () => {
25
+ if (!runtime?.nativeControl() || !sessions || !origin)
26
+ unavailable();
27
+ return sessions.issueBootstrap({ origin }).url;
28
+ },
29
+ listAuthorizations: () => request("oauth.authorizations.list"),
30
+ approveAuthorization: (pendingId) => request("oauth.authorizations.approve", { pendingId }),
31
+ denyAuthorization: (pendingId) => request("oauth.authorizations.deny", { pendingId }),
32
+ listClients: () => request("oauth.clients.list"),
33
+ revokeClient: (clientId) => request("oauth.clients.revoke", { clientId }),
34
+ listGrants: () => request("oauth.grants.list"),
35
+ revokeGrant: (grantId) => request("oauth.grants.revoke", { grantId }),
36
+ revokeOwnerGrants: () => request("oauth.grants.revoke_owner")
37
+ });
38
+ }
39
+ const ROOT_BODY = `<!doctype html><html><head><meta charset="utf-8"><meta name="referrer" content="no-referrer"><meta name="viewport" content="width=device-width,initial-scale=1"><title>CodexGPT local administration</title><link rel="stylesheet" href="/admin.css"></head><body><main><h1>CodexGPT local administration</h1><p id="status">This page is local to this PC. Open it with <code>codexgpt auth open --root &lt;workspace&gt;</code>.</p><section id="content" hidden><h2>Pending links</h2><div id="pending"></div><details><summary>Clients and grants</summary><h2>Clients</h2><div id="clients"></div><h2>Grants</h2><div id="grants"></div></details></section></main><script src="/admin.js" defer></script></body></html>`;
40
+ const ADMIN_CSS = `:root{font-family:system-ui,sans-serif;color-scheme:light dark}body{margin:0;padding:2rem}main{max-width:52rem;margin:auto}button{margin:.25rem .5rem .25rem 0;padding:.55rem .8rem}article{border:1px solid #7776;border-radius:.5rem;padding:1rem;margin:.75rem 0}code{overflow-wrap:anywhere}.muted{opacity:.75}`;
41
+ const ADMIN_JS = `(()=>{const q=s=>document.querySelector(s);let csrf='';const esc=v=>String(v??'');async function api(url,options={}){const headers={'content-type':'application/json',...(options.headers||{})};if(csrf)headers['x-codexgpt-csrf']=csrf;const r=await fetch(url,{credentials:'same-origin',...options,headers});const data=await r.json().catch(()=>({code:'AUTH_ADMIN_RESPONSE_INVALID'}));if(!r.ok)throw new Error(data.code||'AUTH_ADMIN_REQUEST_FAILED');return data}function item(title,lines,actions=[]){const a=document.createElement('article');const h=document.createElement('strong');h.textContent=title;a.append(h);for(const line of lines){const p=document.createElement('p');p.className='muted';p.textContent=line;a.append(p)}for(const action of actions){const b=document.createElement('button');b.textContent=action.label;b.addEventListener('click',action.run);a.append(b)}return a}async function load(){const data=await api('/api/status');q('#status').textContent='Authenticated local owner session.';q('#content').hidden=false;for(const [selector,entries,render] of [['#pending',data.authorizations,auth=>item(auth.correlationCode,[auth.clientLabel,auth.canonicalRoot,auth.scopes.join(', '),auth.expiresAt],[{label:'Approve',run:()=>mutate('/api/authorizations/'+auth.pendingId+'/approve')},{label:'Deny',run:()=>mutate('/api/authorizations/'+auth.pendingId+'/deny')}])],['#clients',data.clients,client=>item(client.label,[client.clientId,client.status,client.redirectHost+client.redirectPath],[{label:'Remove client',run:()=>mutate('/api/clients/'+client.clientId+'/remove')}])],['#grants',data.grants,grant=>item(grant.grantId,[grant.status,grant.scopes.join(', '),grant.absoluteExpiresAt],[{label:'Revoke grant',run:()=>mutate('/api/grants/'+grant.grantId+'/revoke')}])]]){const root=q(selector);root.replaceChildren();if(!entries.length){root.textContent='None.';continue}for(const entry of entries)root.append(render(entry))}}async function mutate(url){await api(url,{method:'POST',body:'{}'});await load()}async function start(){const fragment=new URLSearchParams(location.hash.slice(1));const bootstrap=fragment.get('bootstrap');if(bootstrap){history.replaceState(null,'',location.pathname);const data=await api('/session/bootstrap',{method:'POST',body:JSON.stringify({bootstrap})});csrf=data.csrfToken;sessionStorage.setItem('codexgpt-csrf',csrf)}else csrf=sessionStorage.getItem('codexgpt-csrf')||'';if(!csrf)return;await load()}start().catch(e=>{q('#status').textContent='Local admin unavailable: '+esc(e.message)})})();`;
42
+ function exactHost(req, origin) {
43
+ const expected = new URL(origin);
44
+ const values = [];
45
+ for (let index = 0; index < req.rawHeaders.length; index += 2) {
46
+ if (req.rawHeaders[index]?.toLocaleLowerCase("en-US") === "host") {
47
+ values.push(req.rawHeaders[index + 1] ?? "");
48
+ }
49
+ }
50
+ return values.length === 1 && values[0] === expected.host && req.headers.host === expected.host;
51
+ }
52
+ function loopbackPeer(req) {
53
+ const address = req.socket.remoteAddress;
54
+ return address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
55
+ }
56
+ function setUiHeaders(res) {
57
+ applyNoStore(res);
58
+ res.setHeader("Content-Security-Policy", "default-src 'none'; script-src 'self'; style-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'");
59
+ }
60
+ function errorCode(error) {
61
+ const code = error && typeof error === "object" && "code" in error ? String(error.code) : "AUTH_ADMIN_REQUEST_FAILED";
62
+ return /^[A-Z][A-Z0-9_]{0,79}$/.test(code) ? code : "AUTH_ADMIN_REQUEST_FAILED";
63
+ }
64
+ export function createLocalAdminApp(options) {
65
+ const app = express();
66
+ const expectedOrigin = new URL(options.origin).origin;
67
+ app.disable("x-powered-by");
68
+ app.disable("etag");
69
+ app.set("trust proxy", false);
70
+ app.use(applyBaseSecurityHeaders);
71
+ app.use((_req, res, next) => {
72
+ applyNoStore(res);
73
+ next();
74
+ });
75
+ app.use((req, res, next) => {
76
+ if (!loopbackPeer(req) || !exactHost(req, expectedOrigin)) {
77
+ res.status(403).send("Forbidden");
78
+ return;
79
+ }
80
+ next();
81
+ });
82
+ app.use(express.json({ limit: "4kb", strict: true }));
83
+ app.get("/", (_req, res) => {
84
+ setUiHeaders(res);
85
+ res.type("html").send(ROOT_BODY);
86
+ });
87
+ app.get("/admin.css", (_req, res) => {
88
+ setUiHeaders(res);
89
+ res.type("css").send(ADMIN_CSS);
90
+ });
91
+ app.get("/admin.js", (_req, res) => {
92
+ setUiHeaders(res);
93
+ res.setHeader("Content-Type", "text/javascript; charset=utf-8");
94
+ res.send(ADMIN_JS);
95
+ });
96
+ app.get("/healthz", (_req, res) => {
97
+ applyNoStore(res);
98
+ res.json({
99
+ ok: true,
100
+ name: "CodexGPT local admin",
101
+ ownerChannel: options.ownerAdminService.kind,
102
+ ownerChannelAvailable: options.ownerAdminService.isAvailable()
103
+ });
104
+ });
105
+ app.post("/session/bootstrap", (req, res) => {
106
+ setUiHeaders(res);
107
+ if (req.get("origin") !== expectedOrigin || typeof req.body?.bootstrap !== "string") {
108
+ res.status(403).json({ code: "AUTH_ADMIN_ORIGIN_INVALID" });
109
+ return;
110
+ }
111
+ try {
112
+ const session = options.sessions.exchangeBootstrap(req.body.bootstrap, expectedOrigin);
113
+ res.setHeader("Set-Cookie", `${LOCAL_ADMIN_COOKIE_NAME}=${session.cookieValue}; HttpOnly; SameSite=Strict; Path=/; Max-Age=28800`);
114
+ res.json({ csrfToken: session.csrfToken, expiresAt: session.expiresAt });
115
+ }
116
+ catch (error) {
117
+ res.status(403).json({ code: errorCode(error) });
118
+ }
119
+ });
120
+ const requireSession = (req, res) => {
121
+ try {
122
+ const cookie = parseLocalAdminCookie(req.get("cookie"));
123
+ options.sessions.validateSession(cookie);
124
+ return cookie;
125
+ }
126
+ catch (error) {
127
+ res.status(401).json({ code: errorCode(error) });
128
+ return null;
129
+ }
130
+ };
131
+ const requireMutation = (req, res) => {
132
+ if (req.get("origin") !== expectedOrigin) {
133
+ res.status(403).json({ code: "AUTH_ADMIN_ORIGIN_INVALID" });
134
+ return null;
135
+ }
136
+ const cookie = requireSession(req, res);
137
+ if (!cookie)
138
+ return null;
139
+ try {
140
+ options.sessions.assertCsrf(cookie, req.get("x-codexgpt-csrf") ?? "");
141
+ return cookie;
142
+ }
143
+ catch (error) {
144
+ res.status(403).json({ code: errorCode(error) });
145
+ return null;
146
+ }
147
+ };
148
+ app.get("/api/status", async (req, res) => {
149
+ setUiHeaders(res);
150
+ if (!requireSession(req, res))
151
+ return;
152
+ try {
153
+ const [authorizations, clients, grants] = await Promise.all([
154
+ options.ownerAdminService.listAuthorizations(),
155
+ options.ownerAdminService.listClients(),
156
+ options.ownerAdminService.listGrants()
157
+ ]);
158
+ res.json({
159
+ authorizations: authorizations.oauthAuthorizations ?? [],
160
+ clients: clients.oauthClients ?? [],
161
+ grants: grants.oauthGrants ?? []
162
+ });
163
+ }
164
+ catch (error) {
165
+ res.status(503).json({ code: errorCode(error) });
166
+ }
167
+ });
168
+ const mutation = (action) => async (req, res) => {
169
+ setUiHeaders(res);
170
+ if (!requireMutation(req, res))
171
+ return;
172
+ try {
173
+ const rawId = req.params.id;
174
+ if (typeof rawId !== "string") {
175
+ res.status(400).json({ code: "AUTH_ADMIN_REQUEST_INVALID" });
176
+ return;
177
+ }
178
+ const response = await action(rawId);
179
+ res.status(response.ok ? 200 : 404).json({ code: response.code, changed: response.changed });
180
+ }
181
+ catch (error) {
182
+ res.status(400).json({ code: errorCode(error) });
183
+ }
184
+ };
185
+ app.post("/api/authorizations/:id/approve", mutation((id) => options.ownerAdminService.approveAuthorization(id)));
186
+ app.post("/api/authorizations/:id/deny", mutation((id) => options.ownerAdminService.denyAuthorization(id)));
187
+ app.post("/api/clients/:id/remove", mutation((id) => options.ownerAdminService.revokeClient(id)));
188
+ app.post("/api/grants/:id/revoke", mutation((id) => options.ownerAdminService.revokeGrant(id)));
189
+ app.post("/api/grants/revoke-all", async (req, res) => {
190
+ setUiHeaders(res);
191
+ if (!requireMutation(req, res))
192
+ return;
193
+ try {
194
+ const response = await options.ownerAdminService.revokeOwnerGrants();
195
+ res.json({ code: response.code, changed: response.changed });
196
+ }
197
+ catch (error) {
198
+ res.status(400).json({ code: errorCode(error) });
199
+ }
200
+ });
201
+ return app;
202
+ }
203
+ //# sourceMappingURL=localAdminApp.js.map
package/dist/http/localAdminApp.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"localAdminApp.js","sourceRoot":"","sources":["../../src/http/localAdminApp.ts"],"names":[],"mappings":"AAAA,OAAO,OAAwC,MAAM,SAAS,CAAC;AAG/D,OAAO,EACL,uBAAuB,EAEvB,qBAAqB,EACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAgB9E,SAAS,WAAW;IAClB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8DAA8D,CAAC,EAAE;QAC7F,IAAI,EAAE,yBAAyB;KAChC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAAkD,EAClD,QAAmC,EACnC,MAAe;IAEf,MAAM,OAAO,GAAG,KAAK,EAAE,SAAiB,EAAE,QAAgC,EAAE,EAAmC,EAAE;QAC/G,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE;YAAE,WAAW,EAAE,CAAC;QAC7C,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,KAAK;SACT,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,mBAA4B;QAClC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;QACpD,cAAc,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;gBAAE,WAAW,EAAE,CAAC;YACrE,OAAO,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC;QACjD,CAAC;QACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;QAC9D,oBAAoB,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC;QACnG,iBAAiB,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,CAAC;QAC7F,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAChD,YAAY,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC;QACjF,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9C,WAAW,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,CAAC;QAC7E,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAQD,MAAM,SAAS,GAAG,+rBAA+rB,CAAC;AAEltB,MAAM,SAAS,GAAG,qTAAqT,CAAC;AAExU,MAAM,QAAQ,GAAG,m+EAAm+E,CAAC;AAEr/E,SAAS,SAAS,CAAC,GAAY,EAAE,MAAc;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9D,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;AAClG,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;IACzC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,kBAAkB,CAAC;AACxF,CAAC;AAED,SAAS,YAAY,CAAC,GAAa;IACjC,YAAY,CAAC,GAAG,CAAC,CAAC;IAClB,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,0IAA0I,CAAC,CAAC;AACvL,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,KAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC9I,OAAO,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACtD,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEtD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzB,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,sBAAsB;YAC5B,YAAY,EAAE,OAAO,CAAC,iBAAiB,CAAC,IAAI;YAC5C,qBAAqB,EAAE,OAAO,CAAC,iBAAiB,CAAC,WAAW,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,cAAc,IAAI,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACvF,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,uBAAuB,IAAI,OAAO,CAAC,WAAW,oDAAoD,CAAC,CAAC;YACnI,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,CAAC,GAAY,EAAE,GAAa,EAAiB,EAAE;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,CAAC,GAAY,EAAE,GAAa,EAAiB,EAAE;QACrE,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,cAAc,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC1D,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,EAAE;gBAC9C,OAAO,CAAC,iBAAiB,CAAC,WAAW,EAAE;gBACvC,OAAO,CAAC,iBAAiB,CAAC,UAAU,EAAE;aACvC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC;gBACP,cAAc,EAAE,cAAc,CAAC,mBAAmB,IAAI,EAAE;gBACxD,OAAO,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;gBACnC,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,MAAuD,EAAE,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAClH,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACvC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClH,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5G,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChG,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;YACrE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}
package/dist/http/oauthMcpRuntime.js ADDED
@@ -0,0 +1,294 @@
1
+ import { randomUUID } from "node:crypto";
2
+ import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
3
+ import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
4
+ import { connectProductionCodexGPTServer, createProductionCodexGPTServer, disposeProductionCodexGPTServer } from "../productionRuntime.js";
5
+ import { runWithOAuthRequestContext } from "../auth/requestContext.js";
6
+ import { createOAuthPolicySessionSource } from "../auth/policyIdentity.js";
7
+ import { createProductionGitBootstrapV4 } from "../git/productionBootstrap.js";
8
+ import { resolveTransactionStateRoot } from "../transactions/index.js";
9
+ import { contractIncludesV3 } from "../tools/contracts/index.js";
10
+ const SESSION_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
11
+ const TOKEN_FINGERPRINT_PATTERN = /^[a-f0-9]{64}$/;
12
+ const SESSION_FINGERPRINT_LIMIT = 16;
13
+ function requestSessionId(req) {
14
+ const values = [];
15
+ for (let index = 0; index < req.rawHeaders.length; index += 2) {
16
+ if (req.rawHeaders[index]?.toLocaleLowerCase("en-US") === "mcp-session-id") {
17
+ values.push(req.rawHeaders[index + 1] ?? "");
18
+ }
19
+ }
20
+ if (values.length === 0)
21
+ return { kind: "missing" };
22
+ if (values.length !== 1 || !SESSION_ID_PATTERN.test(values[0]))
23
+ return { kind: "invalid" };
24
+ return { kind: "valid", value: values[0] };
25
+ }
26
+ function bindingFor(context) {
27
+ return Object.freeze({
28
+ ownerRef: context.ownerRef,
29
+ clientRef: context.clientRef,
30
+ resource: context.resource,
31
+ bindingId: context.bindingId,
32
+ incarnationId: context.incarnationId,
33
+ grantId: context.grantId
34
+ });
35
+ }
36
+ function sameBinding(record, context) {
37
+ return record.ownerRef === context.ownerRef &&
38
+ record.clientRef === context.clientRef &&
39
+ record.resource === context.resource &&
40
+ record.bindingId === context.bindingId &&
41
+ record.incarnationId === context.incarnationId &&
42
+ record.grantId === context.grantId;
43
+ }
44
+ function sendSessionError(res, sessionId) {
45
+ res.status(sessionId.kind === "valid" ? 404 : 400).json({
46
+ jsonrpc: "2.0",
47
+ error: sessionId.kind === "missing"
48
+ ? { code: -32000, message: "Bad Request: Mcp-Session-Id header is required" }
49
+ : sessionId.kind === "invalid"
50
+ ? { code: -32000, message: "Bad Request: invalid MCP session id" }
51
+ : { code: -32001, message: "Session not found" },
52
+ id: null
53
+ });
54
+ }
55
+ function oauthConfig(config) {
56
+ return {
57
+ ...config,
58
+ authMode: "oauth",
59
+ authToken: undefined,
60
+ requireHttpToken: false,
61
+ allowQueryToken: false
62
+ };
63
+ }
64
+ export class OAuthReadOnlyMcpRuntime {
65
+ #config;
66
+ #identity;
67
+ #enabledScopes;
68
+ #localApprovalRuntimeV3;
69
+ #semanticPreviewStoreV5;
70
+ #semanticWorkerHealthV5;
71
+ #now;
72
+ #transports = new Map();
73
+ #pruneTimer;
74
+ #closed = false;
75
+ constructor(options) {
76
+ this.#config = oauthConfig(options.config);
77
+ this.#identity = options.identity;
78
+ this.#enabledScopes = Object.freeze([...options.enabledScopes]);
79
+ this.#localApprovalRuntimeV3 = options.localApprovalRuntimeV3;
80
+ this.#semanticPreviewStoreV5 = options.semanticPreviewStoreV5;
81
+ this.#semanticWorkerHealthV5 = options.semanticWorkerHealthV5;
82
+ this.#now = options.now ?? Date.now;
83
+ this.#pruneTimer = setInterval(() => this.#prune(), Math.min(this.#config.httpSessionTtlMs, 60_000));
84
+ this.#pruneTimer.unref();
85
+ }
86
+ isEstablishedSession(req, tokenFingerprint) {
87
+ if (this.#closed || !TOKEN_FINGERPRINT_PATTERN.test(tokenFingerprint))
88
+ return false;
89
+ const sessionId = requestSessionId(req);
90
+ if (sessionId.kind !== "valid")
91
+ return false;
92
+ this.#prune();
93
+ const record = this.#transports.get(sessionId.value);
94
+ if (!record)
95
+ return false;
96
+ this.#pruneFingerprints(record);
97
+ return (record.validatedTokenFingerprints.get(tokenFingerprint) ?? 0) > this.#now();
98
+ }
99
+ async handlePost(req, res, context) {
100
+ if (this.#closed) {
101
+ res.status(503).json({ error: "OAUTH_RUNTIME_UNAVAILABLE" });
102
+ return;
103
+ }
104
+ let provisional;
105
+ try {
106
+ const sessionId = requestSessionId(req);
107
+ let record = this.#getRecord(sessionId, context);
108
+ if (!record && sessionId.kind === "missing" && isInitializeRequest(req.body)) {
109
+ provisional = await runWithOAuthRequestContext(context, () => this.#createTransport(context));
110
+ record = provisional;
111
+ }
112
+ else if (!record) {
113
+ sendSessionError(res, sessionId);
114
+ return;
115
+ }
116
+ this.#rememberFingerprint(record, context);
117
+ record.lastSeenAt = this.#now();
118
+ await runWithOAuthRequestContext(context, async () => {
119
+ await record.transport.handleRequest(req, res, req.body);
120
+ });
121
+ }
122
+ catch (error) {
123
+ console.error(error instanceof Error ? error.stack ?? error.message : String(error));
124
+ if (!res.headersSent) {
125
+ res.status(500).json({
126
+ jsonrpc: "2.0",
127
+ error: { code: -32603, message: "Internal CodexGPT MCP error. Check the local terminal for details." },
128
+ id: null
129
+ });
130
+ }
131
+ }
132
+ finally {
133
+ if (provisional &&
134
+ ![...this.#transports.values()].some((record) => record.transport === provisional.transport)) {
135
+ await this.#disposeRecord(provisional);
136
+ }
137
+ }
138
+ }
139
+ async handleSession(req, res, context) {
140
+ if (this.#closed) {
141
+ res.status(503).json({ error: "OAUTH_RUNTIME_UNAVAILABLE" });
142
+ return;
143
+ }
144
+ try {
145
+ const sessionId = requestSessionId(req);
146
+ const record = this.#getRecord(sessionId, context);
147
+ if (!record) {
148
+ sendSessionError(res, sessionId);
149
+ return;
150
+ }
151
+ this.#rememberFingerprint(record, context);
152
+ record.lastSeenAt = this.#now();
153
+ await runWithOAuthRequestContext(context, async () => {
154
+ await record.transport.handleRequest(req, res);
155
+ });
156
+ }
157
+ catch (error) {
158
+ console.error(error instanceof Error ? error.stack ?? error.message : String(error));
159
+ if (!res.headersSent) {
160
+ res.status(500).json({
161
+ jsonrpc: "2.0",
162
+ error: { code: -32603, message: "Internal CodexGPT MCP error. Check the local terminal for details." },
163
+ id: null
164
+ });
165
+ }
166
+ }
167
+ }
168
+ async close() {
169
+ if (this.#closed)
170
+ return;
171
+ this.#closed = true;
172
+ clearInterval(this.#pruneTimer);
173
+ const records = [...this.#transports.values()];
174
+ this.#transports.clear();
175
+ await Promise.allSettled(records.map((record) => this.#disposeRecord(record)));
176
+ }
177
+ sessionCount() {
178
+ this.#prune();
179
+ return this.#transports.size;
180
+ }
181
+ async #createTransport(context) {
182
+ let transport;
183
+ const policySessionContextSource = createOAuthPolicySessionSource({
184
+ transportSessionId: () => String(transport.sessionId ?? "pending")
185
+ });
186
+ const gitBootstrapV4 = await createProductionGitBootstrapV4(this.#config, {
187
+ stateRoot: resolveTransactionStateRoot()
188
+ });
189
+ let server;
190
+ try {
191
+ server = createProductionCodexGPTServer(this.#config, {
192
+ policySessionContextSource,
193
+ oauthToolSecurity: {
194
+ identity: this.#identity,
195
+ enabledScopes: this.#enabledScopes
196
+ },
197
+ gitBootstrapV4: gitBootstrapV4 ?? undefined,
198
+ localApprovalRuntimeV3: contractIncludesV3(this.#config.toolContractVersion)
199
+ ? this.#localApprovalRuntimeV3
200
+ : undefined,
201
+ semanticPreviewStoreV5: this.#semanticPreviewStoreV5,
202
+ semanticWorkerHealthV5: this.#semanticWorkerHealthV5
203
+ });
204
+ }
205
+ catch (error) {
206
+ await gitBootstrapV4?.dispose();
207
+ throw error;
208
+ }
209
+ let record;
210
+ transport = new StreamableHTTPServerTransport({
211
+ sessionIdGenerator: () => randomUUID(),
212
+ onsessioninitialized: (sessionId) => {
213
+ this.#prune();
214
+ this.#transports.set(sessionId, record);
215
+ this.#prune();
216
+ }
217
+ });
218
+ record = {
219
+ transport,
220
+ binding: bindingFor(context),
221
+ server,
222
+ validatedTokenFingerprints: new Map(),
223
+ createdAt: this.#now(),
224
+ lastSeenAt: this.#now()
225
+ };
226
+ this.#rememberFingerprint(record, context);
227
+ transport.onclose = () => {
228
+ const sessionId = transport.sessionId;
229
+ if (sessionId && this.#transports.get(sessionId) === record)
230
+ this.#transports.delete(sessionId);
231
+ void disposeProductionCodexGPTServer(server);
232
+ };
233
+ try {
234
+ await connectProductionCodexGPTServer(server, transport);
235
+ }
236
+ catch (error) {
237
+ await disposeProductionCodexGPTServer(server);
238
+ throw error;
239
+ }
240
+ return record;
241
+ }
242
+ async #disposeRecord(record) {
243
+ await Promise.resolve(record.transport.close?.()).catch(() => undefined);
244
+ await disposeProductionCodexGPTServer(record.server);
245
+ }
246
+ #getRecord(sessionId, context) {
247
+ if (sessionId.kind !== "valid")
248
+ return undefined;
249
+ this.#prune();
250
+ const record = this.#transports.get(sessionId.value);
251
+ if (!record || !sameBinding(record.binding, context))
252
+ return undefined;
253
+ return record;
254
+ }
255
+ #rememberFingerprint(record, context) {
256
+ const expiresAtMs = context.expiresAt * 1000;
257
+ if (!TOKEN_FINGERPRINT_PATTERN.test(context.tokenFingerprint) || expiresAtMs <= this.#now())
258
+ return;
259
+ this.#pruneFingerprints(record);
260
+ record.validatedTokenFingerprints.delete(context.tokenFingerprint);
261
+ record.validatedTokenFingerprints.set(context.tokenFingerprint, expiresAtMs);
262
+ while (record.validatedTokenFingerprints.size > SESSION_FINGERPRINT_LIMIT) {
263
+ const oldest = record.validatedTokenFingerprints.keys().next().value;
264
+ if (!oldest)
265
+ break;
266
+ record.validatedTokenFingerprints.delete(oldest);
267
+ }
268
+ }
269
+ #pruneFingerprints(record) {
270
+ const now = this.#now();
271
+ for (const [fingerprint, expiresAtMs] of record.validatedTokenFingerprints) {
272
+ if (expiresAtMs <= now)
273
+ record.validatedTokenFingerprints.delete(fingerprint);
274
+ }
275
+ }
276
+ #prune() {
277
+ const now = this.#now();
278
+ for (const [sessionId, record] of this.#transports) {
279
+ if (now - record.lastSeenAt > this.#config.httpSessionTtlMs) {
280
+ this.#transports.delete(sessionId);
281
+ void this.#disposeRecord(record);
282
+ }
283
+ }
284
+ while (this.#transports.size > this.#config.maxHttpSessions) {
285
+ const oldest = [...this.#transports.entries()]
286
+ .sort((left, right) => left[1].lastSeenAt - right[1].lastSeenAt)[0];
287
+ if (!oldest)
288
+ break;
289
+ this.#transports.delete(oldest[0]);
290
+ void this.#disposeRecord(oldest[1]);
291
+ }
292
+ }
293
+ }
294
+ //# sourceMappingURL=oauthMcpRuntime.js.map
package/dist/http/oauthMcpRuntime.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"oauthMcpRuntime.js","sourceRoot":"","sources":["../../src/http/oauthMcpRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,+BAA+B,EAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAE3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAE3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAiCjE,MAAM,kBAAkB,GAAG,iEAAiE,CAAC;AAC7F,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AACnD,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAOrC,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9D,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,gBAAgB,EAAE,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC3F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,OAAsC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAkC,EAAE,OAAsC;IAC7F,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QACzC,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QACtC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QACpC,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QACtC,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;QAC9C,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAa,EAAE,SAA2B;IAClE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACtD,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,SAAS,CAAC,IAAI,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;YAC7E,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;gBAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE;gBAClE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;QACpD,EAAE,EAAE,IAAI;KACT,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAsB;IACzC,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,SAAS;QACpB,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,uBAAuB;IACzB,OAAO,CAAiB;IACxB,SAAS,CAA0B;IACnC,cAAc,CAAwB;IACtC,uBAAuB,CAA0B;IACjD,uBAAuB,CAAwB;IAC/C,uBAAuB,CAAgC;IACvD,IAAI,CAAe;IACnB,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;IACjD,WAAW,CAAiB;IACrC,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,OAA+B;QACzC,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;QAC9D,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;QAC9D,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,WAAW,CAC5B,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAChD,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,oBAAoB,CAAC,GAAY,EAAE,gBAAwB;QACzD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAAE,OAAO,KAAK,CAAC;QACpF,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAY,EAAE,GAAa,EAAE,OAAsC;QAClF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,IAAI,WAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7E,WAAW,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC9F,MAAM,GAAG,WAAW,CAAC;YACvB,CAAC;iBAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnB,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,0BAA0B,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;gBACnD,MAAM,MAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,oEAAoE,EAAE;oBACtG,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IACE,WAAW;gBACX,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,WAAY,CAAC,SAAS,CAAC,EAC7F,CAAC;gBACD,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa,EAAE,OAAsC;QACrF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,0BAA0B,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;gBACnD,MAAM,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,oEAAoE,EAAE;oBACtG,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,YAAY;QACV,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAsC;QAC3D,IAAI,SAAyC,CAAC;QAC9C,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;YAChE,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAE,SAAoC,CAAC,SAAS,IAAI,SAAS,CAAC;SAC/F,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAAC,IAAI,CAAC,OAAO,EAAE;YACxE,SAAS,EAAE,2BAA2B,EAAE;SACzC,CAAC,CAAC;QACH,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,EAAE;gBACpD,0BAA0B;gBAC1B,iBAAiB,EAAE;oBACjB,QAAQ,EAAE,IAAI,CAAC,SAAS;oBACxB,aAAa,EAAE,IAAI,CAAC,cAAc;iBACnC;gBACD,cAAc,EAAE,cAAc,IAAI,SAAS;gBAC3C,sBAAsB,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;oBAC1E,CAAC,CAAC,IAAI,CAAC,uBAAuB;oBAC9B,CAAC,CAAC,SAAS;gBACb,sBAAsB,EAAE,IAAI,CAAC,uBAAuB;gBACpD,sBAAsB,EAAE,IAAI,CAAC,uBAAuB;aACrD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,EAAE,OAAO,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,MAAwB,CAAC;QAC7B,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAC5C,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,oBAAoB,EAAE,CAAC,SAAiB,EAAE,EAAE;gBAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC;SACK,CAAC,CAAC;QACV,MAAM,GAAG;YACP,SAAS;YACT,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC;YAC5B,MAAM;YACN,0BAA0B,EAAE,IAAI,GAAG,EAAE;YACrC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE;YACtB,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE;SACxB,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,SAAiB,CAAC,OAAO,GAAG,GAAG,EAAE;YAChC,MAAM,SAAS,GAAI,SAAoC,CAAC,SAAS,CAAC;YAClE,IAAI,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChG,KAAK,+BAA+B,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,+BAA+B,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAuB;QAC1C,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,+BAA+B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,UAAU,CAAC,SAA2B,EAAE,OAAsC;QAC5E,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACvE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oBAAoB,CAAC,MAAuB,EAAE,OAAsC;QAClF,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QAC7C,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QACpG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACnE,MAAM,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,0BAA0B,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;YAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YAC3F,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,MAAuB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,0BAA0B,EAAE,CAAC;YAC3E,IAAI,WAAW,IAAI,GAAG;gBAAE,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC5D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnC,KAAK,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;iBAC3C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,KAAK,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF"}