nanocodex-vite 0.6.1 → 0.6.4

package/chatgpt-egress.mjs

@@ -7,6 +7,7 @@ import WebSocket, { WebSocketServer } from "ws";
 const CHATGPT_HOST = "chatgpt.com";
 const CHATGPT_PATH_PREFIX = "/backend-api/codex/";
 const RELAY_HTTP_PATHS = new Map([
+  ["codex-responses", "/backend-api/codex/responses"],
   ["codex-web-search", "/backend-api/codex/alpha/search"],
   ["codex-image-generation", "/backend-api/codex/images/generations"],
   ["codex-image-edit", "/backend-api/codex/images/edits"],
@@ -84,13 +85,18 @@ export async function startChatGptWorkerEgress(options = {}) {
 
 async function proxyHttpRequest(request, response, fetchImpl, localPrefix, relayPrefix) {
   const upstreamPath = allowedUpstreamPath(request.url, localPrefix, relayPrefix, false);
-  if (!safeLoopbackRequest(request) || upstreamPath === undefined) {
+  if (!safeLoopbackRequest(request) || upstreamPath === undefined
+    || (request.url?.startsWith(`${relayPrefix}/http/codex-responses`)
+      && (request.method !== "POST" || request.url !== `${relayPrefix}/http/codex-responses`))) {
     response.writeHead(404, noStoreHeaders("text/plain; charset=utf-8"));
     response.end("Not found\n");
     return;
   }
   try {
     const method = request.method ?? "GET";
+    const controller = new AbortController();
+    request.once("aborted", () => controller.abort());
+    response.once("close", () => { if (!response.writableFinished) controller.abort(); });
     const upstream = await fetchImpl(`https://${CHATGPT_HOST}${upstreamPath}`, {
       method,
       headers: upstreamHttpHeaders(request),
@@ -99,17 +105,22 @@ async function proxyHttpRequest(request, response, fetchImpl, localPrefix, relay
         : Readable.toWeb(request),
       duplex: "half",
       redirect: "manual",
+      signal: controller.signal,
     });
     const headers = new Headers(upstream.headers);
     headers.delete("content-encoding");
     headers.delete("content-length");
     headers.set("cache-control", "no-store");
     response.writeHead(upstream.status, upstream.statusText, Object.fromEntries(headers));
-    if (upstream.body) Readable.fromWeb(upstream.body).pipe(response);
+    if (upstream.body) Readable.fromWeb(upstream.body).once("error", (error) => response.destroy(error)).pipe(response);
     else response.end();
-  } catch {
-    if (!response.headersSent) response.writeHead(502, noStoreHeaders("text/plain; charset=utf-8"));
-    response.end("ChatGPT development egress failed\n");
+  } catch (error) {
+    if (response.destroyed) return;
+    if (response.headersSent) response.destroy(error);
+    else {
+      response.writeHead(502, noStoreHeaders("text/plain; charset=utf-8"));
+      response.end("ChatGPT development egress failed\n");
+    }
   }
 }
 
@@ -214,6 +225,10 @@ function upstreamHttpHeaders(request) {
     "x-oai-attestation",
     "x-openai-fedramp",
     "x-session-id",
+    "x-client-request-id",
+    "x-codex-turn-state",
+    "x-openai-internal-codex-responses-lite",
+    "x-responsesapi-include-timing-metrics",
   ]) {
     const value = request.headers[name];
     if (typeof value === "string") headers.set(name, value);

package/oauth-relay.d.mts

@@ -1,4 +1,4 @@
-export type LocalOAuthProvider = "github" | "google" | "gmail" | "gdrive" | "slack" | "x";
+export type LocalOAuthProvider = "github" | "google" | "gmail" | "gdrive" | "slack" | "x" | "spotify" | "soundcloud";
 export type LocalOAuthFlow = "connect" | "managed";
 export type LocalConnectorFlow = LocalOAuthFlow;
 export type LocalConnectorAuthorization = Readonly<{

package/oauth-relay.mjs

@@ -1,4 +1,4 @@
-const PROVIDERS = new Set(["github", "google", "gmail", "gdrive", "slack", "x"]);
+const PROVIDERS = new Set(["github", "google", "gmail", "gdrive", "slack", "x", "spotify", "soundcloud"]);
 const FLOWS = new Set(["connect", "managed"]);
 const BASE64_URL = /^[A-Za-z0-9_-]+$/;
 const INSTANCE_HOST = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.nanocodex\.localhost$/;
@@ -9,7 +9,7 @@ const MAX_CLOCK_SKEW_SECONDS = 30;
 const MAX_INNER_STATE_LENGTH = 512;
 const MAX_ENVELOPE_LENGTH = 2_048;
 const CONNECTION_ID = /^[A-Za-z0-9_-]{43}$/;
-const CONNECTOR_CALLBACK = /^\/v1\/connectors\/(github|google|gmail|gdrive|slack|x)\/callback$/;
+const CONNECTOR_CALLBACK = /^\/v1\/connectors\/(github|google|gmail|gdrive|slack|x|spotify|soundcloud)\/callback$/;
 const MCP_CALLBACK = /^\/v1\/mcp-connections\/([A-Za-z0-9_-]{43})\/callback$/;
 const SAFE_QUERY = ["code", "error", "error_description"];
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nanocodex-vite",
-  "version": "0.6.1",
+  "version": "0.6.4",
   "description": "Vite, Cloudflare, WASM, ChatGPT development, and OAuth relay integration for Nanocodex",
   "type": "module",
   "exports": {
@@ -32,14 +32,14 @@
   "devDependencies": {
     "@cloudflare/vite-plugin": "1.54.2",
     "@types/node": "^22.20.1",
-    "nanocodex": "0.6.1",
+    "nanocodex": "0.6.4",
     "typescript": "5.9.3",
     "vite": "8.2.1",
     "wrangler": "4.127.1"
   },
   "peerDependencies": {
     "@cloudflare/vite-plugin": ">=1.54.2",
-    "nanocodex": "^0.6.1",
+    "nanocodex": "^0.6.4",
     "vite": ">=6.1.0"
   },
   "peerDependenciesMeta": {

package/plugin.mjs

@@ -339,6 +339,9 @@ async function localOAuthBindings() {
 }
 
 export function oauthBindingsFromEnvironment(environment) {
+  const spotifyClientId = firstEnvironmentValue(environment, [
+    "NANOCODEX_SPOTIFY_OAUTH_CLIENT_ID", "SPOTIFY_OAUTH_CLIENT_ID", "SPOTIFY_CLIENT_ID",
+  ]);
   return {
     ...oauthCredentialPair(environment, {
       label: "GitHub",
@@ -361,6 +364,14 @@ export function oauthBindingsFromEnvironment(environment) {
       targetId: "SLACK_OAUTH_CLIENT_ID",
       targetSecret: "SLACK_OAUTH_CLIENT_SECRET",
     }),
+    ...(spotifyClientId ? { SPOTIFY_OAUTH_CLIENT_ID: spotifyClientId } : {}),
+    ...oauthCredentialPair(environment, {
+      label: "SoundCloud",
+      ids: ["NANOCODEX_SOUNDCLOUD_OAUTH_CLIENT_ID", "SOUNDCLOUD_OAUTH_CLIENT_ID", "SOUNDCLOUD_CLIENT_ID"],
+      secrets: ["NANOCODEX_SOUNDCLOUD_OAUTH_CLIENT_SECRET", "SOUNDCLOUD_OAUTH_CLIENT_SECRET", "SOUNDCLOUD_CLIENT_SECRET"],
+      targetId: "SOUNDCLOUD_OAUTH_CLIENT_ID",
+      targetSecret: "SOUNDCLOUD_OAUTH_CLIENT_SECRET",
+    }),
     ...oauthCredentialPair(environment, {
       label: "X",
       ids: ["NANOCODEX_X_OAUTH_CLIENT_ID", "X_OAUTH_CLIENT_ID", "X_CLIENT_ID"],