npm - pockcode - Versions diffs - 0.0.1 → 0.0.4 - Mend

pockcode 0.0.1 → 0.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (12) hide show

package/build/client/index.html CHANGED Viewed

@@ -18,7 +18,7 @@
         document.documentElement.style.colorScheme = resolvedTheme
       })()
     </script>
-    <script type="module" crossorigin src="/assets/index-DQn6eSCt.js"></script>
+    <script type="module" crossorigin src="/assets/index-NZZ2Aqx9.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-D7-eRInW.css">
   </head>
   <body>

package/dist/assets/{api.server-D6ONM6ZJ.js → api.server-Dcqq4Zzw.js} RENAMED Viewed

@@ -1,7 +1,7 @@
 import { c as readWorkspaceTree, d as readRecordField, f as readStringField, l as HttpError, o as listWorkspaceDirectory, s as readWorkspaceResource, u as readBooleanField } from "./socket.server-7dC-9Fnw.js";
-import { A as listProviderAdapters, B as readNumber, C as createAccount, D as readConnectedAccountLimits, E as listAccounts, F as resolveCodexAccountHome, H as ensureDatabase, I as startCodexMcpOauthLogin, L as updateCodexInstructions, N as readCodexInstructions, P as reloadCodexMcpServerConfig, R as asJsonObject, S as authenticateAccount, T as listAccountModels, U as prisma, V as readString, a as executeMessage, b as updateChat, c as interruptChatRun, f as refreshChat, g as reviewChat, h as respondToServerRequest, i as deleteQueuedChatRun, j as listCodexMcpServerStatuses, k as updateAccount, l as listChats, m as reorderQueuedChatRuns, n as compactChat, o as forkChat, r as createChat, t as archiveChat, u as listMessages, v as steerQueuedChatRun, w as deleteAccount, x as updateQueuedChatRun, z as readBoolean } from "./chats.service-H6m23Fna.js";
-import { a as listMessageSchedules, c as updateMessageSchedule, i as listMessageScheduleRuns, n as createMessageSchedule, r as getMessageSchedule, t as archiveMessageSchedule } from "./message-schedules.service-Be9t4LDg.js";
-import { a as readPluginSetting, c as listPluginRegistrations, d as deleteWorkspaceHistory, f as listWorkspaceHistory, i as restartPlugin, l as readPluginRegistration, n as getPluginStatus, o as readPluginState, p as saveWorkspaceHistory, s as writePluginSetting, t as createPluginContext, u as verifyTelegramBotToken } from "./manager.server-Cru4ZxHo.js";
+import { A as listProviderAdapters, B as readNumber, C as createAccount, D as readConnectedAccountLimits, E as listAccounts, F as resolveCodexAccountHome, H as ensureDatabase, I as startCodexMcpOauthLogin, L as updateCodexInstructions, N as readCodexInstructions, P as reloadCodexMcpServerConfig, R as asJsonObject, S as authenticateAccount, T as listAccountModels, U as prisma, V as readString, a as executeMessage, b as updateChat, c as interruptChatRun, f as refreshChat, g as reviewChat, h as respondToServerRequest, i as deleteQueuedChatRun, j as listCodexMcpServerStatuses, k as updateAccount, l as listChats, m as reorderQueuedChatRuns, n as compactChat, o as forkChat, r as createChat, t as archiveChat, u as listMessages, v as steerQueuedChatRun, w as deleteAccount, x as updateQueuedChatRun, z as readBoolean } from "./chats.service-vjB782qi.js";
+import { a as listMessageSchedules, c as updateMessageSchedule, i as listMessageScheduleRuns, n as createMessageSchedule, r as getMessageSchedule, t as archiveMessageSchedule } from "./message-schedules.service-C5TTaPXz.js";
+import { a as readPluginSetting, c as listPluginRegistrations, d as deleteWorkspaceHistory, f as listWorkspaceHistory, i as restartPlugin, l as readPluginRegistration, n as getPluginStatus, o as readPluginState, p as saveWorkspaceHistory, s as writePluginSetting, t as createPluginContext, u as verifyTelegramBotToken } from "./manager.server-C_G8l7U-.js";
 import { realpathSync } from "node:fs";
 import { mkdir, readFile, realpath, stat, writeFile } from "node:fs/promises";
 import path, { join } from "node:path";

package/dist/assets/auth.server-ByhZCVHW.js ADDED Viewed

@@ -0,0 +1,162 @@
+import { r as resolvePockcodeAuthPath, t as ensureParentDirectory } from "./runtime-paths.server-D6rRjGVb.js";
+import { readFile, rename, writeFile } from "node:fs/promises";
+import { createHmac, randomBytes, scrypt, timingSafeEqual } from "node:crypto";
+import { promisify } from "node:util";
+//#region app/server/auth.server.ts
+var scrypt$1 = promisify(scrypt);
+var passwordKeyLength = 64;
+var passwordMinLength = 8;
+var sessionCookieName = "pockcode_session";
+var sessionMaxAgeSeconds = 3600 * 24 * 14;
+var scryptOptions = {
+	N: 16384,
+	maxmem: 64 * 1024 * 1024,
+	p: 1,
+	r: 8
+};
+var authConfigCache;
+async function hasConfiguredPassword() {
+	return Boolean(await readAuthConfig());
+}
+async function setupPassword(password) {
+	const normalized = password.trim();
+	if (normalized.length < passwordMinLength) throw new Error(`Password must be at least ${passwordMinLength} characters.`);
+	if (await readAuthConfig()) throw new Error("Pockcode password is already configured.");
+	const salt = randomBytes(16);
+	const key = await scrypt$1(normalized, salt, passwordKeyLength, scryptOptions);
+	const config = {
+		version: 1,
+		password: {
+			algorithm: "scrypt",
+			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+			key: key.toString("base64"),
+			keyLength: passwordKeyLength,
+			salt: salt.toString("base64"),
+			scrypt: scryptOptions
+		}
+	};
+	const authPath = resolvePockcodeAuthPath();
+	ensureParentDirectory(authPath);
+	const tmpPath = `${authPath}.${process.pid}.${Date.now()}.tmp`;
+	await writeFile(tmpPath, `${JSON.stringify(config, null, 2)}\n`, { mode: 384 });
+	await rename(tmpPath, authPath);
+	authConfigCache = config;
+}
+async function verifyBasicAuthorization(header) {
+	const value = Array.isArray(header) ? header[0] : header;
+	if (!value?.startsWith("Basic ")) return false;
+	let decoded = "";
+	try {
+		decoded = Buffer.from(value.slice(6), "base64").toString("utf8");
+	} catch {
+		return false;
+	}
+	const separatorIndex = decoded.indexOf(":");
+	if (separatorIndex < 0) return false;
+	return verifyPassword(decoded.slice(separatorIndex + 1));
+}
+async function isRequestAuthorized(req) {
+	return await verifySessionCookie(req.headers.cookie) || await verifyBasicAuthorization(req.headers.authorization);
+}
+async function verifyPassword(password) {
+	const config = await readAuthConfig();
+	if (!config) return false;
+	const expectedKey = Buffer.from(config.password.key, "base64");
+	const key = await scrypt$1(password, Buffer.from(config.password.salt, "base64"), config.password.keyLength, config.password.scrypt);
+	return key.length === expectedKey.length && timingSafeEqual(key, expectedKey);
+}
+async function createSessionCookie(req) {
+	const config = await readAuthConfig();
+	if (!config) throw new Error("Pockcode password is not configured.");
+	const payload = {
+		version: 1,
+		nonce: randomBytes(16).toString("base64url"),
+		expiresAt: Date.now() + sessionMaxAgeSeconds * 1e3
+	};
+	const encodedPayload = Buffer.from(JSON.stringify(payload), "utf8").toString("base64url");
+	return serializeCookie(sessionCookieName, `${encodedPayload}.${signSessionPayload(encodedPayload, config)}`, {
+		httpOnly: true,
+		maxAge: sessionMaxAgeSeconds,
+		path: "/",
+		sameSite: "Lax",
+		secure: isHttpsRequest(req)
+	});
+}
+function clearSessionCookie() {
+	return serializeCookie(sessionCookieName, "", {
+		httpOnly: true,
+		maxAge: 0,
+		path: "/",
+		sameSite: "Lax"
+	});
+}
+async function verifySessionCookie(header) {
+	const token = readCookie(header, sessionCookieName);
+	if (!token) return false;
+	const [encodedPayload, signature, extra] = token.split(".");
+	if (!encodedPayload || !signature || extra !== void 0) return false;
+	const config = await readAuthConfig();
+	if (!config) return false;
+	const expectedSignature = signSessionPayload(encodedPayload, config);
+	const signatureBuffer = Buffer.from(signature);
+	const expectedBuffer = Buffer.from(expectedSignature);
+	if (signatureBuffer.length !== expectedBuffer.length || !timingSafeEqual(signatureBuffer, expectedBuffer)) return false;
+	try {
+		const payload = JSON.parse(Buffer.from(encodedPayload, "base64url").toString("utf8"));
+		return payload.version === 1 && typeof payload.nonce === "string" && typeof payload.expiresAt === "number" && payload.expiresAt > Date.now();
+	} catch {
+		return false;
+	}
+}
+function signSessionPayload(encodedPayload, config) {
+	return createHmac("sha256", sessionSecret(config)).update(encodedPayload).digest("base64url");
+}
+function sessionSecret(config) {
+	return Buffer.concat([
+		Buffer.from(config.password.key, "base64"),
+		Buffer.from(config.password.salt, "base64"),
+		Buffer.from(config.password.createdAt, "utf8")
+	]);
+}
+function readCookie(header, name) {
+	const value = Array.isArray(header) ? header.join(";") : header;
+	if (!value) return null;
+	for (const part of value.split(";")) {
+		const separatorIndex = part.indexOf("=");
+		if (separatorIndex < 0) continue;
+		if (part.slice(0, separatorIndex).trim() !== name) continue;
+		return part.slice(separatorIndex + 1).trim() || null;
+	}
+	return null;
+}
+function serializeCookie(name, value, options) {
+	const parts = [`${name}=${value}`];
+	if (options.maxAge !== void 0) parts.push(`Max-Age=${Math.max(0, Math.floor(options.maxAge))}`);
+	if (options.path) parts.push(`Path=${options.path}`);
+	if (options.httpOnly) parts.push("HttpOnly");
+	if (options.sameSite) parts.push(`SameSite=${options.sameSite}`);
+	if (options.secure) parts.push("Secure");
+	return parts.join("; ");
+}
+function isHttpsRequest(req) {
+	return (Array.isArray(req.headers["x-forwarded-proto"]) ? req.headers["x-forwarded-proto"][0] : req.headers["x-forwarded-proto"])?.split(",")[0]?.trim() === "https" || req.socket.encrypted === true;
+}
+async function readAuthConfig() {
+	if (authConfigCache !== void 0) return authConfigCache;
+	const authPath = resolvePockcodeAuthPath();
+	try {
+		authConfigCache = readConfig(JSON.parse(await readFile(authPath, "utf8")));
+	} catch {
+		authConfigCache = null;
+	}
+	return authConfigCache;
+}
+function readConfig(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+	const record = value;
+	const password = record.password;
+	if (record.version !== 1 || !password || password.algorithm !== "scrypt" || typeof password.key !== "string" || typeof password.salt !== "string" || typeof password.keyLength !== "number" || !password.scrypt || typeof password.scrypt.N !== "number" || typeof password.scrypt.r !== "number" || typeof password.scrypt.p !== "number") return null;
+	return record;
+}
+//#endregion
+export { clearSessionCookie, createSessionCookie, hasConfiguredPassword, isRequestAuthorized, setupPassword, verifyBasicAuthorization, verifyPassword };

package/dist/assets/{chat-status-monitor.server-D2VG_D8P.js → chat-status-monitor.server-GIsx-97a.js} RENAMED Viewed

@@ -1,5 +1,5 @@
 import { i as publishProviderEvent, r as onWorkspaceWatchChange, t as listWatchedWorkspacePaths } from "./socket.server-7dC-9Fnw.js";
-import { H as ensureDatabase, M as readCodexHistoryWatchPaths, U as prisma, d as publishMessageDeltas, l as listChats, p as refreshChatStatusesForWorkspaces, y as syncProviderChatsOnce } from "./chats.service-H6m23Fna.js";
+import { H as ensureDatabase, M as readCodexHistoryWatchPaths, U as prisma, d as publishMessageDeltas, l as listChats, p as refreshChatStatusesForWorkspaces, y as syncProviderChatsOnce } from "./chats.service-vjB782qi.js";
 import { watch } from "node:fs";
 import { stat } from "node:fs/promises";
 //#region app/server/chat-status-monitor.server.ts

package/dist/assets/{chats.service-H6m23Fna.js → chats.service-vjB782qi.js} RENAMED Viewed

@@ -2402,7 +2402,7 @@ function readCodexMessageText(value) {
 }
 function isCodexInjectedContextMessage(content) {
 	const trimmed = content.trimStart();
-	return content.includes("<environment_context>") || content.includes("# AGENTS.md instructions") || trimmed.startsWith("<user_action>");
+	return content.includes("<environment_context>") || content.includes("# AGENTS.md instructions") || trimmed.startsWith("<turn_aborted>") || trimmed.startsWith("<user_action>");
 }
 function codexMessageRole(value) {
 	if (value === "user") return "USER";

package/dist/assets/{manager.server-Cru4ZxHo.js → manager.server-C_G8l7U-.js} RENAMED Viewed

@@ -1,5 +1,5 @@
 import { c as readWorkspaceTree, n as onProviderEvent, p as __exportAll } from "./socket.server-7dC-9Fnw.js";
-import { E as listAccounts, H as ensureDatabase, T as listAccountModels, U as prisma, _ as serializeChat, a as executeMessage, b as updateChat, h as respondToServerRequest, l as listChats, s as getChat, u as listMessages } from "./chats.service-H6m23Fna.js";
+import { E as listAccounts, H as ensureDatabase, T as listAccountModels, U as prisma, _ as serializeChat, a as executeMessage, b as updateChat, h as respondToServerRequest, l as listChats, s as getChat, u as listMessages } from "./chats.service-vjB782qi.js";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Bot, InlineKeyboard } from "grammy";
 //#region app/server/workspace-history.service.ts

package/dist/assets/{message-schedule-monitor.server-C4NZg62k.js → message-schedule-monitor.server-CAxiClld.js} RENAMED Viewed

@@ -1,4 +1,4 @@
-import { o as processDueMessageSchedules, s as syncMessageScheduleRunStatuses } from "./message-schedules.service-Be9t4LDg.js";
+import { o as processDueMessageSchedules, s as syncMessageScheduleRunStatuses } from "./message-schedules.service-C5TTaPXz.js";
 //#region app/server/message-schedule-monitor.server.ts
 var pollMs = 3e4;
 var started = false;

package/dist/assets/{message-schedules.service-Be9t4LDg.js → message-schedules.service-C5TTaPXz.js} RENAMED Viewed

@@ -1,5 +1,5 @@
 import { i as publishProviderEvent, l as HttpError } from "./socket.server-7dC-9Fnw.js";
-import { H as ensureDatabase, O as requireConnectedAccount, U as prisma, a as executeMessage, r as createChat } from "./chats.service-H6m23Fna.js";
+import { H as ensureDatabase, O as requireConnectedAccount, U as prisma, a as executeMessage, r as createChat } from "./chats.service-vjB782qi.js";
 import { randomUUID } from "node:crypto";
 //#region app/server/message-schedules.service.ts
 var terminalRunStatuses = new Set([