codexctl 0.7.0

Codex Controller - Full control plane for Codex CLI
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89

use crate::utils::config::Config;
use crate::utils::validation::ProfileName;
use anyhow::{Context as _, Result};
use base64::{Engine as _, engine::general_purpose::STANDARD};
use colored::Colorize as _;
use std::path::Path;

pub async fn execute(config: Config, name: String, data: String, quiet: bool) -> Result<()> {
    let profile_name = ProfileName::try_from(name.as_str())
        .with_context(|| format!("Invalid profile name '{name}'"))?;
    let profile_dir = config.profile_path_validated(&profile_name)?;

    if profile_dir.exists() {
        let confirm = dialoguer::Confirm::new()
            .with_prompt(format!(
                "Profile '{}' already exists. Overwrite?",
                name.yellow()
            ))
            .default(false)
            .interact()?;

        if !confirm {
            if !quiet {
                println!("Cancelled");
            }
            return Ok(());
        }

        tokio::fs::remove_dir_all(&profile_dir).await?;
    }

    // Decode base64
    let decoded = STANDARD
        .decode(&data)
        .with_context(|| "Failed to decode base64 data")?;

    // Decompress (gzip)
    let decompressed = decompress(&decoded)?;

    // Parse as tarball and extract
    extract_tarball(&decompressed, &profile_dir).await?;

    if !quiet {
        println!(
            "{} Profile {} imported successfully",
            "✓".green().bold(),
            name.cyan()
        );
        println!("  {}: {}", "Location".dimmed(), profile_dir.display());
    }

    Ok(())
}

fn decompress(data: &[u8]) -> Result<Vec<u8>> {
    use std::io::Read;
    let mut decoder = flate2::read::GzDecoder::new(data);
    let mut result = Vec::new();
    decoder.read_to_end(&mut result)?;
    Ok(result)
}

async fn extract_tarball(data: &[u8], dest: &Path) -> Result<()> {
    use std::io::Cursor;
    use tar::Archive;

    let cursor = Cursor::new(data);
    let mut archive = Archive::new(cursor);

    tokio::fs::create_dir_all(dest).await?;
    archive.set_preserve_permissions(false);

    for entry in archive.entries()? {
        let mut entry = entry?;
        let entry_path = entry.path()?;
        if !entry_path
            .components()
            .all(|c| matches!(c, std::path::Component::Normal(_)))
        {
            anyhow::bail!(
                "Unsafe path in tarball: {} (path traversal rejected)",
                entry_path.display()
            );
        }
        entry.unpack_in(dest)?;
    }

    Ok(())
}