remote-codex 0.11.9 → 0.11.11

package/apps/relay-server/dist/index.js

@@ -284,6 +284,36 @@ var RelayStore = class _RelayStore {
     this.sqlite.prepare("UPDATE relay_users SET enabled = ? WHERE id = ?").run(enabled ? 1 : 0, userId);
     return this.publicUser({ ...user, enabled });
   }
+  updateAccount(userId, input) {
+    const user = this.requireUser(userId);
+    const username = input.username !== void 0 ? normalizeUsername(input.username) : user.username;
+    if (username.length < 3) {
+      throw new RelayStoreError(400, "bad_request", "Username must be at least 3 characters.");
+    }
+    const existingUsername = this.getUserByUsername(username);
+    if (existingUsername && existingUsername.id !== user.id) {
+      throw new RelayStoreError(409, "conflict", "A user with that username already exists.");
+    }
+    this.sqlite.prepare("UPDATE relay_users SET username = ? WHERE id = ?").run(username, user.id);
+    return this.publicUser({ ...user, username });
+  }
+  updatePassword(userId, input) {
+    const user = this.requireUser(userId);
+    if (!verifySecret(input.currentPassword, user.passwordSalt, user.passwordHash)) {
+      throw new RelayStoreError(403, "forbidden", "Current password is incorrect.");
+    }
+    if (input.newPassword.length < 8) {
+      throw new RelayStoreError(400, "bad_request", "Password must be at least 8 characters.");
+    }
+    const passwordSalt = crypto.randomBytes(16).toString("base64url");
+    const passwordHash = hashSecret(input.newPassword, passwordSalt);
+    this.sqlite.prepare("UPDATE relay_users SET password_salt = ?, password_hash = ? WHERE id = ?").run(passwordSalt, passwordHash, user.id);
+    return this.publicUser({
+      ...user,
+      passwordSalt,
+      passwordHash
+    });
+  }
   emptySession() {
     return {
       authenticated: false,
@@ -680,8 +710,18 @@ var createShareSchema = z.object({
 var setEnabledSchema = z.object({
   enabled: z.boolean()
 });
+var updateAccountSchema = z.object({
+  username: z.string().trim().min(3).optional()
+});
+var updatePasswordSchema = z.object({
+  currentPassword: z.string().min(1),
+  newPassword: z.string().min(8)
+});
 function buildRelayServer(config2) {
   const app2 = Fastify({ logger: false });
+  app2.addContentTypeParser("*", { parseAs: "buffer" }, (_request, body, done) => {
+    done(null, body);
+  });
   const store = RelayStore.fromDataDir(
     config2.dataDir,
     config2.sessionSecret,
@@ -735,6 +775,24 @@ function buildRelayServer(config2) {
     clearRelayCookie(reply);
     return store.emptySession();
   });
+  app2.patch("/relay/account", async (request, reply) => {
+    const user = requireRelayUser(request, reply, store);
+    if (!user) {
+      return;
+    }
+    const body = updateAccountSchema.parse(request.body ?? {});
+    return store.updateAccount(user.id, {
+      ...body.username !== void 0 ? { username: body.username } : {}
+    });
+  });
+  app2.patch("/relay/account/password", async (request, reply) => {
+    const user = requireRelayUser(request, reply, store);
+    if (!user) {
+      return;
+    }
+    const body = updatePasswordSchema.parse(request.body ?? {});
+    return store.updatePassword(user.id, body);
+  });
   app2.get("/relay/portal", async (request, reply) => {
     const user = requireRelayUser(request, reply, store);
     if (!user) {
@@ -1054,6 +1112,7 @@ async function forwardRelayHttp(input) {
   }
   try {
     const requestId = randomUUID();
+    const requestBody = relayRequestBody(input.request.body);
     const response = await supervisor.requestBroker.forward(supervisor.socket, {
       type: "relay.request",
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -1063,7 +1122,8 @@ async function forwardRelayHttp(input) {
         method: input.request.method,
         path: input.targetPath,
         headers: relayRequestHeaders(input.request.headers),
-        body: relayRequestBody(input.request.body)
+        body: requestBody.body,
+        ...requestBody.bodyEncoding ? { bodyEncoding: requestBody.bodyEncoding } : {}
       }
     });
     for (const [name, value] of Object.entries(response.headers)) {
@@ -1071,7 +1131,7 @@ async function forwardRelayHttp(input) {
         input.reply.header(name, value);
       }
     }
-    input.reply.status(response.statusCode).send(response.body);
+    input.reply.status(response.statusCode).send(relayResponseBody(response));
   } catch (error) {
     const message = error instanceof Error ? error.message : "Relay request failed.";
     input.reply.status(message.includes("timed out") ? 504 : 503).send({
@@ -1080,6 +1140,12 @@ async function forwardRelayHttp(input) {
     });
   }
 }
+function relayResponseBody(response) {
+  if (response.bodyEncoding === "base64") {
+    return Buffer.from(response.body, "base64");
+  }
+  return response.body;
+}
 function connectRelayWebsocket(supervisor, socket, threadId) {
   const clientId = randomUUID();
   supervisor.clientSockets.set(clientId, { socket, threadId });
@@ -1291,15 +1357,18 @@ function shouldForwardSocketEvent(event, threadId) {
 }
 function relayRequestBody(body) {
   if (body === void 0 || body === null) {
-    return null;
+    return { body: null };
   }
   if (typeof body === "string") {
-    return body;
+    return { body };
   }
   if (Buffer.isBuffer(body)) {
-    return body.toString("utf8");
+    return {
+      body: body.toString("base64"),
+      bodyEncoding: "base64"
+    };
   }
-  return JSON.stringify(body);
+  return { body: JSON.stringify(body) };
 }
 function relayRequestHeaders(headers) {
   const output = {};