opencandle 0.11.0 → 0.12.0

package/gui/server/local-session-coordinator.ts

@@ -1,97 +0,0 @@
-export type SessionActionType =
-  | "chat.prompt"
-  | "tool.invoke"
-  | "ask_user.answer"
-  | "ask_user.cancel"
-  | "run.cancel";
-
-export type SessionActionSource = "gui" | "tui" | "browser";
-
-export interface SessionActionEnvelope {
-  sessionId: string;
-  actionId: string;
-  actionType: SessionActionType;
-  payload: Record<string, unknown>;
-  source: SessionActionSource;
-}
-
-export type SessionActionResult<T = unknown> =
-  | { ok: true; duplicate: boolean; result: T }
-  | { ok: false; code: "session_busy"; message: string };
-
-export interface LocalSessionCoordinator {
-  runSessionAction<T>(
-    action: SessionActionEnvelope,
-    handler: (action: SessionActionEnvelope) => Promise<T>,
-  ): Promise<SessionActionResult<T>>;
-}
-
-export interface LocalSessionCoordinatorOptions {
-  dedupeRetentionMs?: number;
-  now?: () => number;
-}
-
-interface AcceptedAction {
-  expiresAt: number;
-  result: unknown;
-}
-
-const DEFAULT_DEDUPE_RETENTION_MS = 10 * 60 * 1000;
-const BUSY_MESSAGE = "OpenCandle is still working in this session. Try again when it finishes.";
-
-export function createLocalSessionCoordinator(
-  options: LocalSessionCoordinatorOptions = {},
-): LocalSessionCoordinator {
-  const now = options.now ?? Date.now;
-  const dedupeRetentionMs = options.dedupeRetentionMs ?? DEFAULT_DEDUPE_RETENTION_MS;
-  const acceptedActions = new Map<string, AcceptedAction>();
-  const activeActions = new Map<string, Promise<unknown>>();
-  const activeRunSessions = new Set<string>();
-
-  async function runSessionAction<T>(
-    action: SessionActionEnvelope,
-    handler: (action: SessionActionEnvelope) => Promise<T>,
-  ): Promise<SessionActionResult<T>> {
-    pruneExpiredActions();
-    const actionKey = `${action.sessionId}:${action.actionId}`;
-    const accepted = acceptedActions.get(actionKey);
-    if (accepted) return { ok: true, duplicate: true, result: accepted.result as T };
-    const active = activeActions.get(actionKey);
-    if (active) return { ok: true, duplicate: true, result: (await active) as T };
-
-    if (isRunAdmissionAction(action) && activeRunSessions.has(action.sessionId)) {
-      return { ok: false, code: "session_busy", message: BUSY_MESSAGE };
-    }
-
-    if (isRunAdmissionAction(action)) activeRunSessions.add(action.sessionId);
-    const runAction = (async () => {
-      const result = await handler(action);
-      acceptedActions.set(actionKey, {
-        expiresAt: now() + dedupeRetentionMs,
-        result,
-      });
-      return result;
-    })();
-    activeActions.set(actionKey, runAction);
-    try {
-      const result = await runAction;
-      return { ok: true, duplicate: false, result };
-    } finally {
-      activeActions.delete(actionKey);
-      if (isRunAdmissionAction(action)) activeRunSessions.delete(action.sessionId);
-    }
-  }
-
-  function pruneExpiredActions(): void {
-    const currentTime = now();
-    for (const [actionKey, accepted] of acceptedActions) {
-      if (accepted.expiresAt <= currentTime) acceptedActions.delete(actionKey);
-    }
-  }
-
-  return { runSessionAction };
-}
-
-function isRunAdmissionAction(action: SessionActionEnvelope): boolean {
-  return action.actionType === "chat.prompt" || action.actionType === "tool.invoke";
-}

package/gui/server/market-state-api.ts

@@ -1,273 +0,0 @@
-import type Database from "better-sqlite3";
-import { isZeroFilledQuote, searchYahooInstruments } from "../../src/market-state/resolve.js";
-import { MarketStateService } from "../../src/market-state/service.js";
-import { initDefaultDatabase } from "../../src/memory/sqlite.js";
-import { wrapProvider } from "../../src/providers/wrap-provider.js";
-import { getQuote } from "../../src/providers/yahoo-finance.js";
-
-export interface MarketStateSnapshot {
-  instruments: Array<NonNullable<ReturnType<MarketStateService["getInstrument"]>>>;
-  watchlist: ReturnType<MarketStateService["listWatchlistItems"]>;
-  portfolio: ReturnType<MarketStateService["listPortfolioLots"]>;
-  alerts: ReturnType<MarketStateService["listAlertRules"]>;
-  alertEvents: ReturnType<MarketStateService["listAlertEvents"]>;
-  alertCheckRuns: ReturnType<MarketStateService["listAlertCheckRuns"]>;
-  reportTemplates: ReturnType<MarketStateService["listReportTemplates"]>;
-  reportRuns: ReturnType<MarketStateService["listReportRuns"]>;
-  runnerLease: ReturnType<MarketStateService["getAutomationRunnerLease"]>;
-  notifications: ReturnType<MarketStateService["listNotificationEvents"]>;
-  notificationDeliveryAttempts: ReturnType<MarketStateService["listNotificationDeliveryAttempts"]>;
-}
-
-export interface MarketStateQuoteSnapshot {
-  generatedAt: string;
-  watchlistQuotes: Array<{
-    itemId: number;
-    instrumentId: number;
-    symbol: string;
-    status: "ok" | "unavailable";
-    price?: number;
-    changePercent?: number;
-    fetchedAt?: string;
-    stale?: boolean;
-    reason?: string;
-  }>;
-  portfolioQuotes: Array<{
-    lotId: number;
-    instrumentId: number;
-    symbol: string;
-    status: "ok" | "unavailable";
-    currentPrice?: number;
-    changePercent?: number;
-    marketValue?: number;
-    totalCost: number;
-    pnl?: number;
-    pnlPercent?: number;
-    allocationPercent?: number;
-    currency: string;
-    includedInTotals: boolean;
-    fetchedAt?: string;
-    stale?: boolean;
-    reason?: string;
-  }>;
-  portfolioSummary: {
-    baseCurrency: string;
-    totalValue: number;
-    totalCost: number;
-    totalPnl: number;
-    totalPnlPercent: number;
-    excludedFromTotals: Array<{ symbol: string; currency: string; reason: string }>;
-  };
-}
-
-export function buildMarketStateSnapshot(db?: Database.Database): MarketStateSnapshot {
-  const ownedDb = db ?? initDefaultDatabase();
-  const service = new MarketStateService(ownedDb);
-  try {
-    const alerts = service.listAlertRules();
-    const instrumentIds = [
-      ...new Set(alerts.map((rule) => rule.instrumentId).filter((id) => id != null)),
-    ];
-    return {
-      instruments: instrumentIds
-        .map((id) => service.getInstrument(id))
-        .filter((instrument) => instrument != null),
-      watchlist: service.listWatchlistItems(),
-      portfolio: service.listPortfolioLots(),
-      alerts,
-      alertEvents: service.listAlertEvents(),
-      alertCheckRuns: service.listAlertCheckRuns(),
-      reportTemplates: service.listReportTemplates(),
-      reportRuns: service.listReportRuns(),
-      runnerLease: service.getAutomationRunnerLease(),
-      notifications: service.listNotificationEvents(),
-      notificationDeliveryAttempts: service.listNotificationDeliveryAttempts(),
-    };
-  } finally {
-    if (!db) ownedDb.close();
-  }
-}
-
-export async function buildMarketStateQuoteSnapshot(
-  db?: Database.Database,
-): Promise<MarketStateQuoteSnapshot> {
-  const ownedDb = db ?? initDefaultDatabase();
-  const service = new MarketStateService(ownedDb);
-  try {
-    const watchlist = service.listWatchlistItems();
-    const portfolio = service.listPortfolioLots();
-    const symbols = [
-      ...new Set([...watchlist.map((item) => item.symbol), ...portfolio.map((lot) => lot.symbol)]),
-    ];
-    const quoteMap = new Map<string, Awaited<ReturnType<typeof fetchQuoteSnapshot>>>();
-    for (const symbol of symbols) {
-      quoteMap.set(symbol, await fetchQuoteSnapshot(symbol));
-    }
-
-    const generatedAt = new Date().toISOString();
-    const watchlistQuotes = watchlist.map((item) => {
-      const quote = quoteMap.get(item.symbol);
-      if (quote == null || quote.status === "unavailable") {
-        return {
-          itemId: item.id,
-          instrumentId: item.instrumentId,
-          symbol: item.symbol,
-          status: "unavailable" as const,
-          reason: quote?.reason ?? "quote unavailable",
-        };
-      }
-      return {
-        itemId: item.id,
-        instrumentId: item.instrumentId,
-        symbol: item.symbol,
-        status: "ok" as const,
-        price: quote.price,
-        changePercent: quote.changePercent,
-        fetchedAt: quote.fetchedAt,
-        stale: quote.stale,
-      };
-    });
-
-    const baseCurrency = service.getDefaultPortfolio().baseCurrency ?? "USD";
-    const portfolioQuotes = portfolio.map((lot) => {
-      const quote = quoteMap.get(lot.symbol);
-      const lotCurrency = lot.currency || baseCurrency;
-      const quoteCurrency = lot.instrumentCurrency || lotCurrency;
-      const includedInTotals = lotCurrency === baseCurrency && quoteCurrency === baseCurrency;
-      const totalCost = lot.avgCost * lot.quantity;
-      if (quote == null || quote.status === "unavailable") {
-        return {
-          lotId: lot.id,
-          instrumentId: lot.instrumentId,
-          symbol: lot.symbol,
-          status: "unavailable" as const,
-          totalCost,
-          currency: lotCurrency,
-          includedInTotals: false,
-          reason: quote?.reason ?? "quote unavailable",
-        };
-      }
-      const resolvedQuoteCurrency = quote.currency ?? quoteCurrency;
-      if (resolvedQuoteCurrency !== lotCurrency) {
-        return {
-          lotId: lot.id,
-          instrumentId: lot.instrumentId,
-          symbol: lot.symbol,
-          status: "unavailable" as const,
-          currentPrice: null,
-          marketValue: null,
-          totalCost,
-          pnl: null,
-          pnlPercent: null,
-          currency: lotCurrency,
-          includedInTotals: false,
-          reason: `No FX conversion from ${resolvedQuoteCurrency} to ${lotCurrency}`,
-          fetchedAt: quote.fetchedAt,
-          stale: quote.stale,
-        };
-      }
-      const marketValue = quote.price * lot.quantity;
-      return {
-        lotId: lot.id,
-        instrumentId: lot.instrumentId,
-        symbol: lot.symbol,
-        status: "ok" as const,
-        currentPrice: quote.price,
-        changePercent: quote.changePercent,
-        marketValue,
-        totalCost,
-        pnl: marketValue - totalCost,
-        pnlPercent: totalCost > 0 ? ((marketValue - totalCost) / totalCost) * 100 : 0,
-        currency: lotCurrency,
-        includedInTotals,
-        fetchedAt: quote.fetchedAt,
-        stale: quote.stale,
-        reason: includedInTotals
-          ? undefined
-          : `No FX conversion from ${lotCurrency === baseCurrency ? quoteCurrency : lotCurrency} to ${baseCurrency}`,
-      };
-    });
-    const included = portfolioQuotes.filter(
-      (quote) => quote.status === "ok" && quote.includedInTotals,
-    );
-    const totalValue = included.reduce((sum, quote) => sum + (quote.marketValue ?? 0), 0);
-    const totalCost = included.reduce((sum, quote) => sum + quote.totalCost, 0);
-    const portfolioQuotesWithAllocation = portfolioQuotes.map((quote) => {
-      if (quote.status !== "ok" || !quote.includedInTotals || totalValue <= 0) return quote;
-      return {
-        ...quote,
-        allocationPercent: ((quote.marketValue ?? 0) / totalValue) * 100,
-      };
-    });
-    const excludedFromTotals = portfolioQuotesWithAllocation
-      .filter((quote) => quote.status !== "ok" || !quote.includedInTotals)
-      .map((quote) => ({
-        symbol: quote.symbol,
-        currency: quote.currency,
-        reason: quote.reason ?? "quote unavailable",
-      }));
-    return {
-      generatedAt,
-      watchlistQuotes,
-      portfolioQuotes: portfolioQuotesWithAllocation,
-      portfolioSummary: {
-        baseCurrency,
-        totalValue,
-        totalCost,
-        totalPnl: totalValue - totalCost,
-        totalPnlPercent: totalCost > 0 ? ((totalValue - totalCost) / totalCost) * 100 : 0,
-        excludedFromTotals,
-      },
-    };
-  } finally {
-    if (!db) ownedDb.close();
-  }
-}
-
-export async function searchInstrumentCandidates(query: string): Promise<{
-  query: string;
-  candidates: Awaited<ReturnType<typeof searchYahooInstruments>>;
-  error?: string;
-}> {
-  const trimmed = query.trim();
-  if (!trimmed) return { query: "", candidates: [] };
-  try {
-    return {
-      query: trimmed,
-      candidates: await searchYahooInstruments(trimmed),
-    };
-  } catch (err) {
-    return {
-      query: trimmed,
-      candidates: [],
-      error: err instanceof Error ? err.message : String(err),
-    };
-  }
-}
-
-async function fetchQuoteSnapshot(symbol: string): Promise<
-  | {
-      status: "ok";
-      price: number;
-      changePercent: number;
-      fetchedAt: string;
-      stale?: boolean;
-      currency: string | null;
-    }
-  | { status: "unavailable"; reason: string }
-> {
-  const result = await wrapProvider("yahoo", () => getQuote(symbol));
-  if (result.status === "unavailable") return { status: "unavailable", reason: result.reason };
-  if (result.stale) return { status: "unavailable", reason: "provider returned stale market data" };
-  if (isZeroFilledQuote(result.data)) {
-    return { status: "unavailable", reason: "Yahoo returned no valid market data." };
-  }
-  return {
-    status: "ok",
-    price: result.data.price,
-    changePercent: result.data.changePercent,
-    fetchedAt: result.timestamp,
-    stale: result.stale,
-    currency: result.data.currency ?? null,
-  };
-}

package/gui/server/model-setup.ts

@@ -1,254 +0,0 @@
-import type { Api, Model } from "@earendil-works/pi-ai";
-import { persistProviderCredential } from "../../src/onboarding/connect.js";
-import {
-  getCredentialSource,
-  isApiKeyProvider,
-  PROVIDERS,
-} from "../../src/onboarding/providers.js";
-import { validateCredential } from "../../src/onboarding/validation.js";
-
-export type ModelSetupRequirement = "ready" | "select_model" | "connect_auth";
-
-export interface ModelSetupProvider {
-  id: string;
-  label: string;
-  envVar: string;
-  defaultProvider: string;
-  defaultModel: string;
-  signupUrl: string;
-}
-
-export interface ModelSetupState {
-  requirement: ModelSetupRequirement;
-  currentModel?: string;
-  providers: ModelSetupProvider[];
-  availableModels: Array<{ provider: string; id: string; label: string }>;
-}
-
-export interface ModelSetupRegistry {
-  refresh(): void;
-  getAvailable(): Model<Api>[];
-  hasConfiguredAuth(model: Model<Api>): boolean;
-}
-
-interface ModelSetupAuthStorage {
-  set(provider: string, credential: { type: "api_key"; key: string }): void;
-}
-
-interface MutableModelSetupRegistry extends ModelSetupRegistry {
-  authStorage: ModelSetupAuthStorage;
-  find(provider: string, modelId: string): Model<Api> | undefined;
-}
-
-interface ModelSetupSession {
-  modelRegistry: MutableModelSetupRegistry;
-  model?: Model<Api>;
-  setModel(model: Model<Api>): Promise<void>;
-  settingsManager: {
-    flush(): Promise<void>;
-  };
-}
-
-interface ModelSetupSessionManager {
-  appendCustomMessageEntry(
-    customType: string,
-    content: string,
-    isActive: boolean,
-    data: Record<string, unknown>,
-  ): void;
-}
-
-export interface ModelSetupController {
-  buildCurrentModelSetupState(): ModelSetupState;
-  handleSaveModelApiKey(providerId: string, apiKey: string): Promise<void>;
-  handleSaveProviderApiKey(providerId: string, apiKey: string): Promise<void>;
-  handleSelectModel(provider: string, modelId: string): Promise<void>;
-}
-
-export interface ModelSetupControllerOptions {
-  role: string;
-  getSession: () => ModelSetupSession;
-  getSessionManager: () => ModelSetupSessionManager;
-  broadcastState: () => void;
-}
-
-export const modelSetupProviders: ModelSetupProvider[] = [
-  {
-    id: "google",
-    label: "Google Gemini",
-    envVar: "GEMINI_API_KEY",
-    defaultProvider: "google",
-    defaultModel: "gemini-2.5-flash",
-    signupUrl: "https://aistudio.google.com/app/apikey",
-  },
-  {
-    id: "openai",
-    label: "OpenAI",
-    envVar: "OPENAI_API_KEY",
-    defaultProvider: "openai",
-    defaultModel: "gpt-5-mini",
-    signupUrl: "https://platform.openai.com/api-keys",
-  },
-  {
-    id: "anthropic",
-    label: "Anthropic",
-    envVar: "ANTHROPIC_API_KEY",
-    defaultProvider: "anthropic",
-    defaultModel: "claude-haiku-4-5",
-    signupUrl: "https://console.anthropic.com/settings/keys",
-  },
-];
-
-export function buildModelSetupState(
-  registry: ModelSetupRegistry,
-  currentModel: Model<Api> | undefined,
-): ModelSetupState {
-  registry.refresh();
-  const availableModels = sortModels(registry.getAvailable()).map((model) => ({
-    provider: model.provider,
-    id: model.id,
-    label: `${model.provider}/${model.id}`,
-  }));
-  const requirement =
-    currentModel && registry.hasConfiguredAuth(currentModel)
-      ? "ready"
-      : availableModels.length > 0
-        ? "select_model"
-        : "connect_auth";
-
-  return {
-    requirement,
-    currentModel: currentModel ? `${currentModel.provider}/${currentModel.id}` : undefined,
-    providers: modelSetupProviders,
-    availableModels,
-  };
-}
-
-export function findPreferredModel(
-  registry: Pick<ModelSetupRegistry, "getAvailable">,
-  provider: ModelSetupProvider,
-): Model<Api> | undefined {
-  const available = sortModels(registry.getAvailable(), provider.defaultProvider);
-  return (
-    available.find(
-      (model) => model.provider === provider.defaultProvider && model.id === provider.defaultModel,
-    ) ?? available.find((model) => model.provider === provider.defaultProvider)
-  );
-}
-
-export function sortModels(models: Model<Api>[], preferredProvider?: string): Model<Api>[] {
-  return [...models].sort((a, b) => {
-    const aPreferred = preferredProvider && a.provider === preferredProvider ? -1 : 0;
-    const bPreferred = preferredProvider && b.provider === preferredProvider ? -1 : 0;
-    if (aPreferred !== bPreferred) return aPreferred - bPreferred;
-    const byProvider = a.provider.localeCompare(b.provider);
-    return byProvider !== 0 ? byProvider : a.id.localeCompare(b.id);
-  });
-}
-
-export function createModelSetupController({
-  role,
-  getSession,
-  getSessionManager,
-  broadcastState,
-}: ModelSetupControllerOptions): ModelSetupController {
-  function ensureWriter(): void {
-    if (role !== "writer") throw new Error("Read-only follower mode");
-  }
-
-  function buildCurrentModelSetupState(): ModelSetupState {
-    const session = getSession();
-    return buildModelSetupState(session.modelRegistry, session.model);
-  }
-
-  async function handleSaveModelApiKey(providerId: string, apiKey: string): Promise<void> {
-    ensureWriter();
-
-    const provider = modelSetupProviders.find((candidate) => candidate.id === providerId);
-    if (!provider) throw new Error(`Unknown model provider: ${providerId}`);
-
-    const trimmed = apiKey.trim();
-    if (!trimmed) throw new Error(`Paste a ${provider.label} API key first.`);
-
-    const session = getSession();
-    session.modelRegistry.authStorage.set(provider.id, { type: "api_key", key: trimmed });
-    session.modelRegistry.refresh();
-
-    const model = findPreferredModel(session.modelRegistry, provider);
-    if (!model) {
-      throw new Error(
-        `Saved the ${provider.label} key, but no ${provider.label} models are available yet.`,
-      );
-    }
-
-    await session.setModel(model);
-    await session.settingsManager.flush();
-    getSessionManager().appendCustomMessageEntry(
-      "opencandle-model-setup",
-      `Connected ${provider.label} and selected ${model.provider}/${model.id}.`,
-      true,
-      { source: "gui", provider: provider.id, model: `${model.provider}/${model.id}` },
-    );
-    broadcastState();
-  }
-
-  async function handleSaveProviderApiKey(providerId: string, apiKey: string): Promise<void> {
-    ensureWriter();
-
-    const descriptor = PROVIDERS.find((candidate) => candidate.id === providerId);
-    if (!descriptor) throw new Error(`Unknown provider: ${providerId}`);
-    if (!isApiKeyProvider(descriptor)) {
-      throw new Error(`${descriptor.displayName} is not configured with an API key.`);
-    }
-
-    if (getCredentialSource(descriptor.id) === "env") {
-      throw new Error(
-        `${descriptor.displayName} is set via the ${descriptor.envVar} environment variable. Unset it to override here.`,
-      );
-    }
-
-    const trimmed = apiKey.trim();
-    if (!trimmed) throw new Error(`Paste a ${descriptor.displayName} API key first.`);
-
-    const validation = await validateCredential(descriptor.id, trimmed);
-    if (validation.status === "invalid") {
-      const statusHint =
-        validation.httpStatus !== undefined ? ` (HTTP ${validation.httpStatus})` : "";
-      const messageHint = validation.message ? ` — ${validation.message}` : "";
-      throw new Error(
-        `${descriptor.displayName} rejected the key${statusHint}${messageHint}. The existing configuration was not changed.`,
-      );
-    }
-
-    persistProviderCredential(descriptor.id, trimmed);
-
-    const verifiedNote =
-      validation.status === "transient"
-        ? `Saved ${descriptor.displayName} key but couldn't verify it (${validation.reason}). The next request will surface any issue.`
-        : `Connected ${descriptor.displayName}. Key saved to ~/.opencandle/config.json.`;
-
-    getSessionManager().appendCustomMessageEntry("opencandle-provider-setup", verifiedNote, true, {
-      source: "gui",
-      provider: descriptor.id,
-      status: validation.status,
-    });
-    broadcastState();
-  }
-
-  async function handleSelectModel(provider: string, modelId: string): Promise<void> {
-    ensureWriter();
-    const session = getSession();
-    session.modelRegistry.refresh();
-    const model = session.modelRegistry.find(provider, modelId);
-    if (!model) throw new Error(`Unknown model: ${provider}/${modelId}`);
-    await session.setModel(model);
-    await session.settingsManager.flush();
-  }
-
-  return {
-    buildCurrentModelSetupState,
-    handleSaveModelApiKey,
-    handleSaveProviderApiKey,
-    handleSelectModel,
-  };
-}

package/gui/server/package.json

@@ -1,5 +0,0 @@
-{
-  "name": "@opencandle/gui-server",
-  "private": true,
-  "type": "module"
-}

package/gui/server/private-api-access.ts

@@ -1,62 +0,0 @@
-import type { IncomingHttpHeaders } from "node:http";
-
-const PRIVATE_API_COOKIE = "opencandle_gui_session";
-
-export function isLoopbackAddress(remoteAddress: string | undefined): boolean {
-  if (remoteAddress == null || remoteAddress === "") return false;
-  return (
-    remoteAddress === "::1" ||
-    remoteAddress === "localhost" ||
-    remoteAddress.startsWith("127.") ||
-    remoteAddress.startsWith("::ffff:127.")
-  );
-}
-
-export function isTrustedPrivateApiRequest(
-  headers: IncomingHttpHeaders,
-  sessionToken: string,
-  remoteAddress: string | undefined,
-  options: { allowRemote?: boolean } = {},
-): boolean {
-  if (!options.allowRemote && !isLoopbackAddress(remoteAddress)) return false;
-  if (cookieValue(headers.cookie, PRIVATE_API_COOKIE) !== sessionToken) return false;
-
-  const fetchSite = headerValue(headers["sec-fetch-site"]);
-  if (fetchSite != null && fetchSite !== "same-origin" && fetchSite !== "none") return false;
-
-  const origin = headerValue(headers.origin);
-  const host = headerValue(headers.host);
-  if (origin != null && host != null) {
-    try {
-      if (new URL(origin).host !== host) return false;
-    } catch {
-      return false;
-    }
-  }
-
-  return true;
-}
-
-export function privateApiCookieHeader(sessionToken: string): string {
-  return `${PRIVATE_API_COOKIE}=${encodeURIComponent(sessionToken)}; Path=/; HttpOnly; SameSite=Strict`;
-}
-
-function cookieValue(header: string | string[] | undefined, name: string): string | undefined {
-  const value = Array.isArray(header) ? header.join("; ") : header;
-  if (value == null) return undefined;
-  for (const part of value.split(";")) {
-    const [rawKey, ...rawValue] = part.trim().split("=");
-    if (rawKey === name) {
-      try {
-        return decodeURIComponent(rawValue.join("="));
-      } catch {
-        return undefined;
-      }
-    }
-  }
-  return undefined;
-}
-
-function headerValue(value: string | string[] | undefined): string | undefined {
-  return Array.isArray(value) ? value[0] : value;
-}