Refactor runtime parsing to strict Zod validation
8 months ago
Authored
mweinbach- remove Codex auth fallback token/material merging and rely on strict token payload parsing
- replace ad-hoc error-code casts with reusable Zod error-shape parsing across config/store/utils/server flows
- harden tool/runtime boundaries (glob, bash, grep, memory, mcp client loading, websocket input) with schema validation
- eliminate remaining src-level any/double-casts by using typed stream inputs and safer runtime guards
- keep behavior stable while tightening runtime parsing and error handling paths
Co-authored-by: Codex <noreply@openai.com>
Parentd0e7315
28 files changed
- src/agent.ts+17−7
- src/auth/oauth-server.ts+9−5
- src/cli/repl.ts+2−1
- src/cli/repl/stateStore.ts+16−8
- src/client/agentSocket.ts+11−6
- src/config.ts+5−2
- src/index.ts+2−1
- src/mcp/authStore.ts+10−2
- src/mcp/configRegistry.ts+11
−5
src/mcp/index.ts+28−8src/providers/codex-auth.ts+14−25src/providers/googleReplay.ts+9−4src/server/index.ts+2−1src/server/session/TurnExecutionManager.ts+3−1src/server/sessionBackup.ts+7−2src/server/sessionStore.ts+3−1src/server/sessionTitleService.ts+2−1src/server/startServer.ts+38−8src/store/connections.ts+9−2src/tools/bash.ts+7−2src/tools/glob.ts+43−18src/tools/grep.ts+5−2src/tools/memory.ts+8−3src/tools/spawnAgent.ts+3−2src/tools/todoWrite.ts+5−4src/utils/approval.ts+7−2src/utils/atomicFile.ts+6−2src/utils/permissions.ts+7−2