Import AITURK IDE 1.0.0-beta.1 from Hermes 63279301; preserve MIT license

apps/shared/src/websocket-url.ts

@@ -0,0 +1,151 @@
+export type GatewayAuthMode = 'oauth' | 'token' | (string & {})
+
+export interface GatewayWsConnection {
+  authMode?: GatewayAuthMode | null
+  profile?: null | string
+  wsUrl: string
+}
+
+export interface ResolveGatewayWsUrlDeps {
+  /**
+   * Returns a fresh WebSocket URL for the selected backend/profile.
+   * OAuth-gated gateways use single-use tickets, so callers should mint
+   * immediately before opening the socket.
+   */
+  getGatewayWsUrl?: (profile?: null | string) => Promise<GatewayWsUrlResult>
+}
+
+export type GatewayWsUrlResult =
+  | string
+  | { ok: true; wsUrl: string }
+  | { error: string; needsOauthLogin?: boolean; ok: false }
+
+export class GatewayReauthRequiredError extends Error {
+  readonly needsOauthLogin = true
+
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, options)
+    this.name = 'GatewayReauthRequiredError'
+  }
+}
+
+export function isGatewayReauthRequired(error: unknown): error is GatewayReauthRequiredError {
+  return (
+    error instanceof GatewayReauthRequiredError ||
+    (typeof error === 'object' && error !== null && (error as { needsOauthLogin?: unknown }).needsOauthLogin === true)
+  )
+}
+
+export async function resolveGatewayWsUrl(deps: ResolveGatewayWsUrlDeps, conn: GatewayWsConnection): Promise<string> {
+  const mint = deps.getGatewayWsUrl
+  const profile = conn.profile ?? null
+
+  if (conn.authMode === 'oauth') {
+    if (!mint) {
+      throw new Error('This Desktop build cannot refresh OAuth WebSocket tickets. Update Hermes Desktop and try again.')
+    }
+
+    try {
+      const result = await mint(profile)
+
+      if (typeof result === 'string') {
+        return result
+      }
+
+      if (result.ok) {
+        return result.wsUrl
+      }
+
+      if (result.needsOauthLogin) {
+        throw new GatewayReauthRequiredError(
+          'Your remote gateway session has expired. Open Settings -> Gateway and click "Sign in" again.',
+          { cause: new Error(result.error) }
+        )
+      }
+
+      throw new Error(result.error || 'Could not refresh the remote gateway WebSocket ticket.')
+    } catch (error) {
+      if (isGatewayReauthRequired(error)) {
+        throw error instanceof GatewayReauthRequiredError
+          ? error
+          : new GatewayReauthRequiredError(
+              'Your remote gateway session has expired. Open Settings -> Gateway and click "Sign in" again.',
+              { cause: error }
+            )
+      }
+
+      throw error
+    }
+  }
+
+  if (mint) {
+    const fresh = await mint(profile).catch(() => null)
+
+    if (typeof fresh === 'string') {
+      return fresh
+    }
+
+    if (fresh?.ok) {
+      return fresh.wsUrl
+    }
+  }
+
+  return conn.wsUrl
+}
+
+export type WebSocketAuthParam = readonly [name: string, value: string]
+
+export interface HermesWebSocketUrlOptions {
+  /** Dashboard or gateway-relative endpoint path, e.g. "/api/ws". */
+  path: string
+  /** Optional URL prefix when the backend is reverse-proxied below a subpath. */
+  basePath?: string
+  /** Query auth pair, usually ["token", value] or ["ticket", value]. */
+  authParam?: WebSocketAuthParam
+  /** Extra query params merged before auth. */
+  params?: Record<string, string>
+  /** Browser protocol string such as "https:"; defaults to window.location.protocol. */
+  protocol?: string
+  /** Host with optional port; defaults to window.location.host. */
+  host?: string
+}
+
+function readWindowLocation(): { host: string; protocol: string } {
+  if (typeof window === 'undefined') {
+    return { host: '', protocol: 'http:' }
+  }
+
+  return { host: window.location.host, protocol: window.location.protocol }
+}
+
+function normalizeBasePath(basePath: string | undefined): string {
+  if (!basePath) {
+    return ''
+  }
+
+  const withLead = basePath.startsWith('/') ? basePath : `/${basePath}`
+
+  return withLead.replace(/\/+$/, '')
+}
+
+function normalizeEndpointPath(path: string): string {
+  return path.startsWith('/') ? path : `/${path}`
+}
+
+export function buildHermesWebSocketUrl(options: HermesWebSocketUrlOptions): string {
+  const loc = readWindowLocation()
+  const protocol = options.protocol ?? loc.protocol
+  const host = options.host ?? loc.host
+  const wsScheme = protocol === 'https:' || protocol === 'wss:' ? 'wss:' : 'ws:'
+  const qs = new URLSearchParams(options.params ?? {})
+
+  if (options.authParam) {
+    const [name, value] = options.authParam
+    qs.set(name, value)
+  }
+
+  const query = qs.toString()
+  const suffix = query ? `?${query}` : ''
+
+  return `${wsScheme}//${host}${normalizeBasePath(options.basePath)}${normalizeEndpointPath(options.path)}${suffix}`
+}