npm - easc-cli - Versions diffs - 1.1.28 - Mend

easc-cli 1.1.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (404) hide show

package/AGENTS.md +27 -0
package/Dockerfile +18 -0
package/README.md +15 -0
package/bin/opencode +108 -0
package/bunfig.toml +7 -0
package/package.json +132 -0
package/parsers-config.ts +253 -0
package/script/build.ts +172 -0
package/script/deploy.ts +64 -0
package/script/postinstall.mjs +125 -0
package/script/publish-registries.ts +187 -0
package/script/publish.ts +70 -0
package/script/schema.ts +47 -0
package/script/seed-e2e.ts +50 -0
package/src/acp/README.md +164 -0
package/src/acp/agent.ts +1285 -0
package/src/acp/session.ts +105 -0
package/src/acp/types.ts +22 -0
package/src/agent/agent.ts +332 -0
package/src/agent/generate.txt +75 -0
package/src/agent/prompt/compaction.txt +12 -0
package/src/agent/prompt/explore.txt +18 -0
package/src/agent/prompt/summary.txt +11 -0
package/src/agent/prompt/title.txt +43 -0
package/src/auth/eliseart.ts +76 -0
package/src/auth/index.ts +73 -0
package/src/bun/index.ts +134 -0
package/src/bus/bus-event.ts +43 -0
package/src/bus/global.ts +10 -0
package/src/bus/index.ts +105 -0
package/src/cli/bootstrap.ts +17 -0
package/src/cli/cmd/account.ts +81 -0
package/src/cli/cmd/acp.ts +69 -0
package/src/cli/cmd/agent.ts +257 -0
package/src/cli/cmd/auth.ts +427 -0
package/src/cli/cmd/cmd.ts +7 -0
package/src/cli/cmd/debug/agent.ts +166 -0
package/src/cli/cmd/debug/config.ts +16 -0
package/src/cli/cmd/debug/file.ts +97 -0
package/src/cli/cmd/debug/index.ts +48 -0
package/src/cli/cmd/debug/lsp.ts +52 -0
package/src/cli/cmd/debug/ripgrep.ts +87 -0
package/src/cli/cmd/debug/scrap.ts +16 -0
package/src/cli/cmd/debug/skill.ts +16 -0
package/src/cli/cmd/debug/snapshot.ts +52 -0
package/src/cli/cmd/export.ts +88 -0
package/src/cli/cmd/generate.ts +38 -0
package/src/cli/cmd/github.ts +1548 -0
package/src/cli/cmd/import.ts +98 -0
package/src/cli/cmd/mcp.ts +827 -0
package/src/cli/cmd/models.ts +77 -0
package/src/cli/cmd/pr.ts +112 -0
package/src/cli/cmd/run.ts +407 -0
package/src/cli/cmd/serve.ts +20 -0
package/src/cli/cmd/session.ts +135 -0
package/src/cli/cmd/stats.ts +402 -0
package/src/cli/cmd/tui/app.tsx +774 -0
package/src/cli/cmd/tui/attach.ts +31 -0
package/src/cli/cmd/tui/component/border.tsx +21 -0
package/src/cli/cmd/tui/component/dialog-agent.tsx +31 -0
package/src/cli/cmd/tui/component/dialog-command.tsx +148 -0
package/src/cli/cmd/tui/component/dialog-mcp.tsx +86 -0
package/src/cli/cmd/tui/component/dialog-model.tsx +234 -0
package/src/cli/cmd/tui/component/dialog-provider.tsx +256 -0
package/src/cli/cmd/tui/component/dialog-session-list.tsx +114 -0
package/src/cli/cmd/tui/component/dialog-session-rename.tsx +31 -0
package/src/cli/cmd/tui/component/dialog-stash.tsx +87 -0
package/src/cli/cmd/tui/component/dialog-status.tsx +164 -0
package/src/cli/cmd/tui/component/dialog-supabase.tsx +102 -0
package/src/cli/cmd/tui/component/dialog-tag.tsx +44 -0
package/src/cli/cmd/tui/component/dialog-theme-list.tsx +50 -0
package/src/cli/cmd/tui/component/logo.tsx +88 -0
package/src/cli/cmd/tui/component/prompt/autocomplete.tsx +653 -0
package/src/cli/cmd/tui/component/prompt/frecency.tsx +89 -0
package/src/cli/cmd/tui/component/prompt/history.tsx +108 -0
package/src/cli/cmd/tui/component/prompt/index.tsx +1182 -0
package/src/cli/cmd/tui/component/prompt/stash.tsx +101 -0
package/src/cli/cmd/tui/component/spinner.tsx +16 -0
package/src/cli/cmd/tui/component/textarea-keybindings.ts +73 -0
package/src/cli/cmd/tui/component/tips.tsx +153 -0
package/src/cli/cmd/tui/component/todo-item.tsx +32 -0
package/src/cli/cmd/tui/context/args.tsx +14 -0
package/src/cli/cmd/tui/context/directory.ts +13 -0
package/src/cli/cmd/tui/context/exit.tsx +23 -0
package/src/cli/cmd/tui/context/helper.tsx +25 -0
package/src/cli/cmd/tui/context/keybind.tsx +101 -0
package/src/cli/cmd/tui/context/kv.tsx +52 -0
package/src/cli/cmd/tui/context/local.tsx +402 -0
package/src/cli/cmd/tui/context/prompt.tsx +18 -0
package/src/cli/cmd/tui/context/route.tsx +46 -0
package/src/cli/cmd/tui/context/sdk.tsx +94 -0
package/src/cli/cmd/tui/context/sync.tsx +445 -0
package/src/cli/cmd/tui/context/theme/aura.json +69 -0
package/src/cli/cmd/tui/context/theme/ayu.json +80 -0
package/src/cli/cmd/tui/context/theme/carbonfox.json +248 -0
package/src/cli/cmd/tui/context/theme/catppuccin-frappe.json +233 -0
package/src/cli/cmd/tui/context/theme/catppuccin-macchiato.json +233 -0
package/src/cli/cmd/tui/context/theme/catppuccin.json +112 -0
package/src/cli/cmd/tui/context/theme/cobalt2.json +228 -0
package/src/cli/cmd/tui/context/theme/cursor.json +249 -0
package/src/cli/cmd/tui/context/theme/dracula.json +219 -0
package/src/cli/cmd/tui/context/theme/everforest.json +241 -0
package/src/cli/cmd/tui/context/theme/flexoki.json +237 -0
package/src/cli/cmd/tui/context/theme/github.json +233 -0
package/src/cli/cmd/tui/context/theme/gruvbox.json +95 -0
package/src/cli/cmd/tui/context/theme/kanagawa.json +77 -0
package/src/cli/cmd/tui/context/theme/lucent-orng.json +237 -0
package/src/cli/cmd/tui/context/theme/material.json +235 -0
package/src/cli/cmd/tui/context/theme/matrix.json +77 -0
package/src/cli/cmd/tui/context/theme/mercury.json +252 -0
package/src/cli/cmd/tui/context/theme/monokai.json +221 -0
package/src/cli/cmd/tui/context/theme/nightowl.json +221 -0
package/src/cli/cmd/tui/context/theme/nord.json +223 -0
package/src/cli/cmd/tui/context/theme/one-dark.json +84 -0
package/src/cli/cmd/tui/context/theme/orng.json +249 -0
package/src/cli/cmd/tui/context/theme/osaka-jade.json +93 -0
package/src/cli/cmd/tui/context/theme/palenight.json +222 -0
package/src/cli/cmd/tui/context/theme/rosepine.json +234 -0
package/src/cli/cmd/tui/context/theme/solarized.json +223 -0
package/src/cli/cmd/tui/context/theme/synthwave84.json +226 -0
package/src/cli/cmd/tui/context/theme/tokyonight.json +243 -0
package/src/cli/cmd/tui/context/theme/vercel.json +245 -0
package/src/cli/cmd/tui/context/theme/vesper.json +218 -0
package/src/cli/cmd/tui/context/theme/zenburn.json +223 -0
package/src/cli/cmd/tui/context/theme.tsx +1152 -0
package/src/cli/cmd/tui/event.ts +48 -0
package/src/cli/cmd/tui/routes/home.tsx +140 -0
package/src/cli/cmd/tui/routes/session/dialog-fork-from-timeline.tsx +64 -0
package/src/cli/cmd/tui/routes/session/dialog-message.tsx +109 -0
package/src/cli/cmd/tui/routes/session/dialog-subagent.tsx +26 -0
package/src/cli/cmd/tui/routes/session/dialog-timeline.tsx +47 -0
package/src/cli/cmd/tui/routes/session/dialog-tool.tsx +63 -0
package/src/cli/cmd/tui/routes/session/footer.tsx +129 -0
package/src/cli/cmd/tui/routes/session/header.tsx +136 -0
package/src/cli/cmd/tui/routes/session/index.tsx +2132 -0
package/src/cli/cmd/tui/routes/session/permission.tsx +495 -0
package/src/cli/cmd/tui/routes/session/question.tsx +435 -0
package/src/cli/cmd/tui/routes/session/sidebar.tsx +313 -0
package/src/cli/cmd/tui/thread.ts +165 -0
package/src/cli/cmd/tui/ui/dialog-alert.tsx +57 -0
package/src/cli/cmd/tui/ui/dialog-confirm.tsx +83 -0
package/src/cli/cmd/tui/ui/dialog-export-options.tsx +204 -0
package/src/cli/cmd/tui/ui/dialog-help.tsx +38 -0
package/src/cli/cmd/tui/ui/dialog-prompt.tsx +77 -0
package/src/cli/cmd/tui/ui/dialog-select.tsx +376 -0
package/src/cli/cmd/tui/ui/dialog.tsx +167 -0
package/src/cli/cmd/tui/ui/link.tsx +28 -0
package/src/cli/cmd/tui/ui/spinner.ts +368 -0
package/src/cli/cmd/tui/ui/toast.tsx +100 -0
package/src/cli/cmd/tui/util/clipboard.ts +160 -0
package/src/cli/cmd/tui/util/editor.ts +32 -0
package/src/cli/cmd/tui/util/signal.ts +7 -0
package/src/cli/cmd/tui/util/terminal.ts +114 -0
package/src/cli/cmd/tui/util/transcript.ts +98 -0
package/src/cli/cmd/tui/worker.ts +152 -0
package/src/cli/cmd/uninstall.ts +357 -0
package/src/cli/cmd/upgrade.ts +73 -0
package/src/cli/cmd/web.ts +81 -0
package/src/cli/error.ts +57 -0
package/src/cli/network.ts +53 -0
package/src/cli/ui.ts +84 -0
package/src/cli/upgrade.ts +25 -0
package/src/command/index.ts +131 -0
package/src/command/template/initialize.txt +10 -0
package/src/command/template/review.txt +99 -0
package/src/config/config.ts +1361 -0
package/src/config/markdown.ts +93 -0
package/src/env/index.ts +26 -0
package/src/file/ignore.ts +83 -0
package/src/file/index.ts +411 -0
package/src/file/ripgrep.ts +407 -0
package/src/file/time.ts +64 -0
package/src/file/watcher.ts +127 -0
package/src/flag/flag.ts +54 -0
package/src/format/formatter.ts +342 -0
package/src/format/index.ts +137 -0
package/src/global/index.ts +55 -0
package/src/id/id.ts +83 -0
package/src/ide/index.ts +76 -0
package/src/index.ts +162 -0
package/src/installation/index.ts +246 -0
package/src/lsp/client.ts +252 -0
package/src/lsp/index.ts +485 -0
package/src/lsp/language.ts +119 -0
package/src/lsp/server.ts +2046 -0
package/src/mcp/auth.ts +135 -0
package/src/mcp/index.ts +931 -0
package/src/mcp/oauth-callback.ts +200 -0
package/src/mcp/oauth-provider.ts +154 -0
package/src/patch/index.ts +680 -0
package/src/permission/arity.ts +163 -0
package/src/permission/index.ts +210 -0
package/src/permission/next.ts +269 -0
package/src/plugin/codex.ts +493 -0
package/src/plugin/copilot.ts +269 -0
package/src/plugin/index.ts +135 -0
package/src/project/bootstrap.ts +35 -0
package/src/project/instance.ts +91 -0
package/src/project/project.ts +339 -0
package/src/project/state.ts +66 -0
package/src/project/vcs.ts +76 -0
package/src/provider/auth.ts +147 -0
package/src/provider/models-macro.ts +11 -0
package/src/provider/models.ts +112 -0
package/src/provider/provider.ts +1391 -0
package/src/provider/sdk/openai-compatible/src/README.md +5 -0
package/src/provider/sdk/openai-compatible/src/index.ts +2 -0
package/src/provider/sdk/openai-compatible/src/openai-compatible-provider.ts +100 -0
package/src/provider/sdk/openai-compatible/src/responses/convert-to-openai-responses-input.ts +303 -0
package/src/provider/sdk/openai-compatible/src/responses/map-openai-responses-finish-reason.ts +22 -0
package/src/provider/sdk/openai-compatible/src/responses/openai-config.ts +18 -0
package/src/provider/sdk/openai-compatible/src/responses/openai-error.ts +22 -0
package/src/provider/sdk/openai-compatible/src/responses/openai-responses-api-types.ts +207 -0
package/src/provider/sdk/openai-compatible/src/responses/openai-responses-language-model.ts +1732 -0
package/src/provider/sdk/openai-compatible/src/responses/openai-responses-prepare-tools.ts +177 -0
package/src/provider/sdk/openai-compatible/src/responses/openai-responses-settings.ts +1 -0
package/src/provider/sdk/openai-compatible/src/responses/tool/code-interpreter.ts +88 -0
package/src/provider/sdk/openai-compatible/src/responses/tool/file-search.ts +128 -0
package/src/provider/sdk/openai-compatible/src/responses/tool/image-generation.ts +115 -0
package/src/provider/sdk/openai-compatible/src/responses/tool/local-shell.ts +65 -0
package/src/provider/sdk/openai-compatible/src/responses/tool/web-search-preview.ts +104 -0
package/src/provider/sdk/openai-compatible/src/responses/tool/web-search.ts +103 -0
package/src/provider/transform.ts +733 -0
package/src/pty/index.ts +232 -0
package/src/question/index.ts +171 -0
package/src/scheduler/index.ts +61 -0
package/src/server/error.ts +36 -0
package/src/server/event.ts +7 -0
package/src/server/mdns.ts +59 -0
package/src/server/routes/config.ts +92 -0
package/src/server/routes/experimental.ts +208 -0
package/src/server/routes/file.ts +197 -0
package/src/server/routes/global.ts +135 -0
package/src/server/routes/mcp.ts +361 -0
package/src/server/routes/permission.ts +68 -0
package/src/server/routes/project.ts +82 -0
package/src/server/routes/provider.ts +165 -0
package/src/server/routes/pty.ts +169 -0
package/src/server/routes/question.ts +98 -0
package/src/server/routes/session.ts +935 -0
package/src/server/routes/tui.ts +379 -0
package/src/server/server.ts +573 -0
package/src/session/compaction.ts +225 -0
package/src/session/index.ts +488 -0
package/src/session/llm.ts +279 -0
package/src/session/message-v2.ts +702 -0
package/src/session/message.ts +189 -0
package/src/session/processor.ts +406 -0
package/src/session/prompt/anthropic-20250930.txt +166 -0
package/src/session/prompt/anthropic.txt +105 -0
package/src/session/prompt/anthropic_spoof.txt +1 -0
package/src/session/prompt/beast.txt +147 -0
package/src/session/prompt/build-switch.txt +5 -0
package/src/session/prompt/codex_header.txt +79 -0
package/src/session/prompt/copilot-gpt-5.txt +143 -0
package/src/session/prompt/gemini.txt +155 -0
package/src/session/prompt/max-steps.txt +16 -0
package/src/session/prompt/plan-reminder-anthropic.txt +67 -0
package/src/session/prompt/plan.txt +26 -0
package/src/session/prompt/qwen.txt +109 -0
package/src/session/prompt.ts +1820 -0
package/src/session/retry.ts +90 -0
package/src/session/revert.ts +108 -0
package/src/session/status.ts +76 -0
package/src/session/summary.ts +150 -0
package/src/session/system.ts +152 -0
package/src/session/todo.ts +37 -0
package/src/share/share-next.ts +200 -0
package/src/share/share.ts +92 -0
package/src/shell/shell.ts +67 -0
package/src/skill/index.ts +1 -0
package/src/skill/skill.ts +136 -0
package/src/snapshot/index.ts +236 -0
package/src/storage/storage.ts +227 -0
package/src/tool/apply_patch.ts +269 -0
package/src/tool/apply_patch.txt +33 -0
package/src/tool/bash.ts +259 -0
package/src/tool/bash.txt +115 -0
package/src/tool/batch.ts +175 -0
package/src/tool/batch.txt +24 -0
package/src/tool/codesearch.ts +132 -0
package/src/tool/codesearch.txt +12 -0
package/src/tool/edit.ts +645 -0
package/src/tool/edit.txt +10 -0
package/src/tool/external-directory.ts +32 -0
package/src/tool/glob.ts +77 -0
package/src/tool/glob.txt +6 -0
package/src/tool/grep.ts +154 -0
package/src/tool/grep.txt +8 -0
package/src/tool/invalid.ts +17 -0
package/src/tool/ls.ts +121 -0
package/src/tool/ls.txt +1 -0
package/src/tool/lsp.ts +96 -0
package/src/tool/lsp.txt +19 -0
package/src/tool/multiedit.ts +46 -0
package/src/tool/multiedit.txt +41 -0
package/src/tool/plan-enter.txt +14 -0
package/src/tool/plan-exit.txt +13 -0
package/src/tool/plan.ts +130 -0
package/src/tool/question.ts +33 -0
package/src/tool/question.txt +10 -0
package/src/tool/read.ts +202 -0
package/src/tool/read.txt +12 -0
package/src/tool/registry.ts +163 -0
package/src/tool/skill.ts +75 -0
package/src/tool/task.ts +188 -0
package/src/tool/task.txt +60 -0
package/src/tool/todo.ts +53 -0
package/src/tool/todoread.txt +14 -0
package/src/tool/todowrite.txt +167 -0
package/src/tool/tool.ts +88 -0
package/src/tool/truncation.ts +106 -0
package/src/tool/webfetch.ts +182 -0
package/src/tool/webfetch.txt +13 -0
package/src/tool/websearch.ts +150 -0
package/src/tool/websearch.txt +14 -0
package/src/tool/write.ts +80 -0
package/src/tool/write.txt +8 -0
package/src/util/archive.ts +16 -0
package/src/util/color.ts +19 -0
package/src/util/context.ts +25 -0
package/src/util/defer.ts +12 -0
package/src/util/eventloop.ts +20 -0
package/src/util/filesystem.ts +93 -0
package/src/util/fn.ts +11 -0
package/src/util/format.ts +20 -0
package/src/util/iife.ts +3 -0
package/src/util/keybind.ts +103 -0
package/src/util/lazy.ts +18 -0
package/src/util/locale.ts +81 -0
package/src/util/lock.ts +98 -0
package/src/util/log.ts +180 -0
package/src/util/queue.ts +32 -0
package/src/util/rpc.ts +66 -0
package/src/util/scrap.ts +10 -0
package/src/util/signal.ts +12 -0
package/src/util/timeout.ts +14 -0
package/src/util/token.ts +7 -0
package/src/util/wildcard.ts +56 -0
package/src/worktree/index.ts +424 -0
package/sst-env.d.ts +9 -0
package/test/acp/event-subscription.test.ts +436 -0
package/test/agent/agent.test.ts +638 -0
package/test/bun.test.ts +53 -0
package/test/cli/github-action.test.ts +129 -0
package/test/cli/github-remote.test.ts +80 -0
package/test/cli/tui/transcript.test.ts +297 -0
package/test/config/agent-color.test.ts +66 -0
package/test/config/config.test.ts +1414 -0
package/test/config/fixtures/empty-frontmatter.md +4 -0
package/test/config/fixtures/frontmatter.md +28 -0
package/test/config/fixtures/no-frontmatter.md +1 -0
package/test/config/markdown.test.ts +192 -0
package/test/file/ignore.test.ts +10 -0
package/test/file/path-traversal.test.ts +198 -0
package/test/fixture/fixture.ts +45 -0
package/test/fixture/lsp/fake-lsp-server.js +77 -0
package/test/ide/ide.test.ts +82 -0
package/test/keybind.test.ts +421 -0
package/test/lsp/client.test.ts +95 -0
package/test/mcp/headers.test.ts +153 -0
package/test/mcp/oauth-browser.test.ts +261 -0
package/test/patch/patch.test.ts +348 -0
package/test/permission/arity.test.ts +33 -0
package/test/permission/next.test.ts +652 -0
package/test/permission-task.test.ts +319 -0
package/test/plugin/codex.test.ts +123 -0
package/test/preload.ts +65 -0
package/test/project/project.test.ts +120 -0
package/test/provider/amazon-bedrock.test.ts +268 -0
package/test/provider/gitlab-duo.test.ts +286 -0
package/test/provider/provider.test.ts +2149 -0
package/test/provider/transform.test.ts +1596 -0
package/test/question/question.test.ts +300 -0
package/test/scheduler.test.ts +73 -0
package/test/server/session-list.test.ts +39 -0
package/test/server/session-select.test.ts +78 -0
package/test/session/compaction.test.ts +293 -0
package/test/session/llm.test.ts +90 -0
package/test/session/message-v2.test.ts +662 -0
package/test/session/retry.test.ts +131 -0
package/test/session/revert-compact.test.ts +285 -0
package/test/session/session.test.ts +71 -0
package/test/skill/skill.test.ts +185 -0
package/test/snapshot/snapshot.test.ts +939 -0
package/test/tool/__snapshots__/tool.test.ts.snap +9 -0
package/test/tool/apply_patch.test.ts +499 -0
package/test/tool/bash.test.ts +320 -0
package/test/tool/external-directory.test.ts +126 -0
package/test/tool/fixtures/large-image.png +0 -0
package/test/tool/fixtures/models-api.json +33453 -0
package/test/tool/grep.test.ts +109 -0
package/test/tool/question.test.ts +105 -0
package/test/tool/read.test.ts +332 -0
package/test/tool/registry.test.ts +76 -0
package/test/tool/truncation.test.ts +159 -0
package/test/util/filesystem.test.ts +39 -0
package/test/util/format.test.ts +59 -0
package/test/util/iife.test.ts +36 -0
package/test/util/lazy.test.ts +50 -0
package/test/util/lock.test.ts +72 -0
package/test/util/timeout.test.ts +21 -0
package/test/util/wildcard.test.ts +75 -0
package/tsconfig.json +16 -0

package/src/mcp/oauth-callback.ts ADDED Viewed

@@ -0,0 +1,200 @@
+import { Log } from "../util/log"
+import { OAUTH_CALLBACK_PORT, OAUTH_CALLBACK_PATH } from "./oauth-provider"
+const log = Log.create({ service: "mcp.oauth-callback" })
+const HTML_SUCCESS = `<!DOCTYPE html>
+<html>
+<head>
+  <title>OpenCode - Authorization Successful</title>
+  <style>
+    body { font-family: system-ui, -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #1a1a2e; color: #eee; }
+    .container { text-align: center; padding: 2rem; }
+    h1 { color: #4ade80; margin-bottom: 1rem; }
+    p { color: #aaa; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <h1>Authorization Successful</h1>
+    <p>You can close this window and return to OpenCode.</p>
+  </div>
+  <script>setTimeout(() => window.close(), 2000);</script>
+</body>
+</html>`
+const HTML_ERROR = (error: string) => `<!DOCTYPE html>
+<html>
+<head>
+  <title>OpenCode - Authorization Failed</title>
+  <style>
+    body { font-family: system-ui, -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #1a1a2e; color: #eee; }
+    .container { text-align: center; padding: 2rem; }
+    h1 { color: #f87171; margin-bottom: 1rem; }
+    p { color: #aaa; }
+    .error { color: #fca5a5; font-family: monospace; margin-top: 1rem; padding: 1rem; background: rgba(248,113,113,0.1); border-radius: 0.5rem; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <h1>Authorization Failed</h1>
+    <p>An error occurred during authorization.</p>
+    <div class="error">${error}</div>
+  </div>
+</body>
+</html>`
+interface PendingAuth {
+  resolve: (code: string) => void
+  reject: (error: Error) => void
+  timeout: ReturnType<typeof setTimeout>
+}
+export namespace McpOAuthCallback {
+  let server: ReturnType<typeof Bun.serve> | undefined
+  const pendingAuths = new Map<string, PendingAuth>()
+  const CALLBACK_TIMEOUT_MS = 5 * 60 * 1000 // 5 minutes
+  export async function ensureRunning(): Promise<void> {
+    if (server) return
+    const running = await isPortInUse()
+    if (running) {
+      log.info("oauth callback server already running on another instance", { port: OAUTH_CALLBACK_PORT })
+      return
+    }
+    server = Bun.serve({
+      port: OAUTH_CALLBACK_PORT,
+      fetch(req) {
+        const url = new URL(req.url)
+        if (url.pathname !== OAUTH_CALLBACK_PATH) {
+          return new Response("Not found", { status: 404 })
+        }
+        const code = url.searchParams.get("code")
+        const state = url.searchParams.get("state")
+        const error = url.searchParams.get("error")
+        const errorDescription = url.searchParams.get("error_description")
+        log.info("received oauth callback", { hasCode: !!code, state, error })
+        // Enforce state parameter presence
+        if (!state) {
+          const errorMsg = "Missing required state parameter - potential CSRF attack"
+          log.error("oauth callback missing state parameter", { url: url.toString() })
+          return new Response(HTML_ERROR(errorMsg), {
+            status: 400,
+            headers: { "Content-Type": "text/html" },
+          })
+        }
+        if (error) {
+          const errorMsg = errorDescription || error
+          if (pendingAuths.has(state)) {
+            const pending = pendingAuths.get(state)!
+            clearTimeout(pending.timeout)
+            pendingAuths.delete(state)
+            pending.reject(new Error(errorMsg))
+          }
+          return new Response(HTML_ERROR(errorMsg), {
+            headers: { "Content-Type": "text/html" },
+          })
+        }
+        if (!code) {
+          return new Response(HTML_ERROR("No authorization code provided"), {
+            status: 400,
+            headers: { "Content-Type": "text/html" },
+          })
+        }
+        // Validate state parameter
+        if (!pendingAuths.has(state)) {
+          const errorMsg = "Invalid or expired state parameter - potential CSRF attack"
+          log.error("oauth callback with invalid state", { state, pendingStates: Array.from(pendingAuths.keys()) })
+          return new Response(HTML_ERROR(errorMsg), {
+            status: 400,
+            headers: { "Content-Type": "text/html" },
+          })
+        }
+        const pending = pendingAuths.get(state)!
+        clearTimeout(pending.timeout)
+        pendingAuths.delete(state)
+        pending.resolve(code)
+        return new Response(HTML_SUCCESS, {
+          headers: { "Content-Type": "text/html" },
+        })
+      },
+    })
+    log.info("oauth callback server started", { port: OAUTH_CALLBACK_PORT })
+  }
+  export function waitForCallback(oauthState: string): Promise<string> {
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        if (pendingAuths.has(oauthState)) {
+          pendingAuths.delete(oauthState)
+          reject(new Error("OAuth callback timeout - authorization took too long"))
+        }
+      }, CALLBACK_TIMEOUT_MS)
+      pendingAuths.set(oauthState, { resolve, reject, timeout })
+    })
+  }
+  export function cancelPending(mcpName: string): void {
+    const pending = pendingAuths.get(mcpName)
+    if (pending) {
+      clearTimeout(pending.timeout)
+      pendingAuths.delete(mcpName)
+      pending.reject(new Error("Authorization cancelled"))
+    }
+  }
+  export async function isPortInUse(): Promise<boolean> {
+    return new Promise((resolve) => {
+      Bun.connect({
+        hostname: "127.0.0.1",
+        port: OAUTH_CALLBACK_PORT,
+        socket: {
+          open(socket) {
+            socket.end()
+            resolve(true)
+          },
+          error() {
+            resolve(false)
+          },
+          data() {},
+          close() {},
+        },
+      }).catch(() => {
+        resolve(false)
+      })
+    })
+  }
+  export async function stop(): Promise<void> {
+    if (server) {
+      server.stop()
+      server = undefined
+      log.info("oauth callback server stopped")
+    }
+    for (const [name, pending] of pendingAuths) {
+      clearTimeout(pending.timeout)
+      pending.reject(new Error("OAuth callback server stopped"))
+    }
+    pendingAuths.clear()
+  }
+  export function isRunning(): boolean {
+    return server !== undefined
+  }
+}

package/src/mcp/oauth-provider.ts ADDED Viewed

@@ -0,0 +1,154 @@
+import type { OAuthClientProvider } from "@modelcontextprotocol/sdk/client/auth.js"
+import type {
+  OAuthClientMetadata,
+  OAuthTokens,
+  OAuthClientInformation,
+  OAuthClientInformationFull,
+} from "@modelcontextprotocol/sdk/shared/auth.js"
+import { McpAuth } from "./auth"
+import { Log } from "../util/log"
+const log = Log.create({ service: "mcp.oauth" })
+const OAUTH_CALLBACK_PORT = 19876
+const OAUTH_CALLBACK_PATH = "/mcp/oauth/callback"
+export interface McpOAuthConfig {
+  clientId?: string
+  clientSecret?: string
+  scope?: string
+}
+export interface McpOAuthCallbacks {
+  onRedirect: (url: URL) => void | Promise<void>
+}
+export class McpOAuthProvider implements OAuthClientProvider {
+  constructor(
+    private mcpName: string,
+    private serverUrl: string,
+    private config: McpOAuthConfig,
+    private callbacks: McpOAuthCallbacks,
+  ) {}
+  get redirectUrl(): string {
+    return `http://127.0.0.1:${OAUTH_CALLBACK_PORT}${OAUTH_CALLBACK_PATH}`
+  }
+  get clientMetadata(): OAuthClientMetadata {
+    return {
+      redirect_uris: [this.redirectUrl],
+      client_name: "OpenCode",
+      client_uri: "https://eliseart.ai",
+      grant_types: ["authorization_code", "refresh_token"],
+      response_types: ["code"],
+      token_endpoint_auth_method: this.config.clientSecret ? "client_secret_post" : "none",
+    }
+  }
+  async clientInformation(): Promise<OAuthClientInformation | undefined> {
+    // Check config first (pre-registered client)
+    if (this.config.clientId) {
+      return {
+        client_id: this.config.clientId,
+        client_secret: this.config.clientSecret,
+      }
+    }
+    // Check stored client info (from dynamic registration)
+    // Use getForUrl to validate credentials are for the current server URL
+    const entry = await McpAuth.getForUrl(this.mcpName, this.serverUrl)
+    if (entry?.clientInfo) {
+      // Check if client secret has expired
+      if (entry.clientInfo.clientSecretExpiresAt && entry.clientInfo.clientSecretExpiresAt < Date.now() / 1000) {
+        log.info("client secret expired, need to re-register", { mcpName: this.mcpName })
+        return undefined
+      }
+      return {
+        client_id: entry.clientInfo.clientId,
+        client_secret: entry.clientInfo.clientSecret,
+      }
+    }
+    // No client info or URL changed - will trigger dynamic registration
+    return undefined
+  }
+  async saveClientInformation(info: OAuthClientInformationFull): Promise<void> {
+    await McpAuth.updateClientInfo(
+      this.mcpName,
+      {
+        clientId: info.client_id,
+        clientSecret: info.client_secret,
+        clientIdIssuedAt: info.client_id_issued_at,
+        clientSecretExpiresAt: info.client_secret_expires_at,
+      },
+      this.serverUrl,
+    )
+    log.info("saved dynamically registered client", {
+      mcpName: this.mcpName,
+      clientId: info.client_id,
+    })
+  }
+  async tokens(): Promise<OAuthTokens | undefined> {
+    // Use getForUrl to validate tokens are for the current server URL
+    const entry = await McpAuth.getForUrl(this.mcpName, this.serverUrl)
+    if (!entry?.tokens) return undefined
+    return {
+      access_token: entry.tokens.accessToken,
+      token_type: "Bearer",
+      refresh_token: entry.tokens.refreshToken,
+      expires_in: entry.tokens.expiresAt
+        ? Math.max(0, Math.floor(entry.tokens.expiresAt - Date.now() / 1000))
+        : undefined,
+      scope: entry.tokens.scope,
+    }
+  }
+  async saveTokens(tokens: OAuthTokens): Promise<void> {
+    await McpAuth.updateTokens(
+      this.mcpName,
+      {
+        accessToken: tokens.access_token,
+        refreshToken: tokens.refresh_token,
+        expiresAt: tokens.expires_in ? Date.now() / 1000 + tokens.expires_in : undefined,
+        scope: tokens.scope,
+      },
+      this.serverUrl,
+    )
+    log.info("saved oauth tokens", { mcpName: this.mcpName })
+  }
+  async redirectToAuthorization(authorizationUrl: URL): Promise<void> {
+    log.info("redirecting to authorization", { mcpName: this.mcpName, url: authorizationUrl.toString() })
+    await this.callbacks.onRedirect(authorizationUrl)
+  }
+  async saveCodeVerifier(codeVerifier: string): Promise<void> {
+    await McpAuth.updateCodeVerifier(this.mcpName, codeVerifier)
+  }
+  async codeVerifier(): Promise<string> {
+    const entry = await McpAuth.get(this.mcpName)
+    if (!entry?.codeVerifier) {
+      throw new Error(`No code verifier saved for MCP server: ${this.mcpName}`)
+    }
+    return entry.codeVerifier
+  }
+  async saveState(state: string): Promise<void> {
+    await McpAuth.updateOAuthState(this.mcpName, state)
+  }
+  async state(): Promise<string> {
+    const entry = await McpAuth.get(this.mcpName)
+    if (!entry?.oauthState) {
+      throw new Error(`No OAuth state saved for MCP server: ${this.mcpName}`)
+    }
+    return entry.oauthState
+  }
+}
+export { OAUTH_CALLBACK_PORT, OAUTH_CALLBACK_PATH }