@cloudcli-ai/cloudcli 1.36.3 → 1.37.1

package/server/utils/mcp-detector.js

@@ -1,147 +0,0 @@
-/**
- * MCP SERVER DETECTION UTILITY
- * ============================
- * 
- * Centralized utility for detecting MCP server configurations.
- * Used across TaskMaster integration and other MCP-dependent features.
- */
-
-import { promises as fsPromises } from 'fs';
-import path from 'path';
-import os from 'os';
-
-/**
- * Check if task-master-ai MCP server is configured
- * Reads directly from Claude configuration files like claude-cli.js does
- * @returns {Promise<Object>} MCP detection result
- */
-export async function detectTaskMasterMCPServer() {
-    try {
-        // Read Claude configuration files directly (same logic as mcp.js)
-        const homeDir = os.homedir();
-        const configPaths = [
-            path.join(homeDir, '.claude.json'),
-            path.join(homeDir, '.claude', 'settings.json')
-        ];
-        
-        let configData = null;
-        let configPath = null;
-        
-        // Try to read from either config file
-        for (const filepath of configPaths) {
-            try {
-                const fileContent = await fsPromises.readFile(filepath, 'utf8');
-                configData = JSON.parse(fileContent);
-                configPath = filepath;
-                break;
-            } catch (error) {
-                // File doesn't exist or is not valid JSON, try next
-                continue;
-            }
-        }
-        
-        if (!configData) {
-            return {
-                hasMCPServer: false,
-                reason: 'No Claude configuration file found',
-                hasConfig: false
-            };
-        }
-
-        // Look for task-master-ai in user-scoped MCP servers
-        let taskMasterServer = null;
-        if (configData.mcpServers && typeof configData.mcpServers === 'object') {
-            const serverEntry = Object.entries(configData.mcpServers).find(([name, config]) => 
-                name === 'task-master-ai' || 
-                name.includes('task-master') ||
-                (config && config.command && config.command.includes('task-master'))
-            );
-            
-            if (serverEntry) {
-                const [name, config] = serverEntry;
-                taskMasterServer = {
-                    name,
-                    scope: 'user',
-                    config,
-                    type: config.command ? 'stdio' : (config.url ? 'http' : 'unknown')
-                };
-            }
-        }
-
-        // Also check project-specific MCP servers if not found globally
-        if (!taskMasterServer && configData.projects) {
-            for (const [projectPath, projectConfig] of Object.entries(configData.projects)) {
-                if (projectConfig.mcpServers && typeof projectConfig.mcpServers === 'object') {
-                    const serverEntry = Object.entries(projectConfig.mcpServers).find(([name, config]) => 
-                        name === 'task-master-ai' || 
-                        name.includes('task-master') ||
-                        (config && config.command && config.command.includes('task-master'))
-                    );
-                    
-                    if (serverEntry) {
-                        const [name, config] = serverEntry;
-                        taskMasterServer = {
-                            name,
-                            scope: 'local',
-                            projectPath,
-                            config,
-                            type: config.command ? 'stdio' : (config.url ? 'http' : 'unknown')
-                        };
-                        break;
-                    }
-                }
-            }
-        }
-
-        if (taskMasterServer) {
-            const isValid = !!(taskMasterServer.config && 
-                             (taskMasterServer.config.command || taskMasterServer.config.url));
-            const hasEnvVars = !!(taskMasterServer.config && 
-                                taskMasterServer.config.env && 
-                                Object.keys(taskMasterServer.config.env).length > 0);
-
-            return {
-                hasMCPServer: true,
-                isConfigured: isValid,
-                hasApiKeys: hasEnvVars,
-                scope: taskMasterServer.scope,
-                config: {
-                    command: taskMasterServer.config?.command,
-                    args: taskMasterServer.config?.args || [],
-                    url: taskMasterServer.config?.url,
-                    envVars: hasEnvVars ? Object.keys(taskMasterServer.config.env) : [],
-                    type: taskMasterServer.type
-                }
-            };
-        } else {
-            // Get list of available servers for debugging
-            const availableServers = [];
-            if (configData.mcpServers) {
-                availableServers.push(...Object.keys(configData.mcpServers));
-            }
-            if (configData.projects) {
-                for (const projectConfig of Object.values(configData.projects)) {
-                    if (projectConfig.mcpServers) {
-                        availableServers.push(...Object.keys(projectConfig.mcpServers).map(name => `local:${name}`));
-                    }
-                }
-            }
-
-            return {
-                hasMCPServer: false,
-                reason: 'task-master-ai not found in configured MCP servers',
-                hasConfig: true,
-                configPath,
-                availableServers
-            };
-        }
-    } catch (error) {
-        console.error('Error detecting MCP server config:', error);
-        return {
-            hasMCPServer: false,
-            reason: `Error checking MCP config: ${error.message}`,
-            hasConfig: false
-        };
-    }
-}
-

package/server/utils/runtime-paths.js

@@ -1,37 +0,0 @@
-import path from 'path';
-import { fileURLToPath } from 'url';
-
-export function getModuleDir(importMetaUrl) {
-  return path.dirname(fileURLToPath(importMetaUrl));
-}
-
-export function findServerRoot(startDir) {
-  // Source files live under /server, while compiled files live under /dist-server/server.
-  // Walking up to the nearest "server" folder gives every backend module one stable anchor
-  // that works in both layouts instead of relying on fragile "../.." assumptions.
-  let currentDir = startDir;
-
-  while (path.basename(currentDir) !== 'server') {
-    const parentDir = path.dirname(currentDir);
-
-    if (parentDir === currentDir) {
-      throw new Error(`Could not resolve the backend server root from "${startDir}".`);
-    }
-
-    currentDir = parentDir;
-  }
-
-  return currentDir;
-}
-
-export function findAppRoot(startDir) {
-  const serverRoot = findServerRoot(startDir);
-  const parentOfServerRoot = path.dirname(serverRoot);
-
-  // Source files live at <app>/server, while compiled files live at <app>/dist-server/server.
-  // When the nearest server folder sits inside dist-server we need to hop one extra level up
-  // so repo-level files still resolve from the real app root instead of the build directory.
-  return path.basename(parentOfServerRoot) === 'dist-server'
-    ? path.dirname(parentOfServerRoot)
-    : parentOfServerRoot;
-}

package/server/utils/taskmaster-websocket.js

@@ -1,135 +0,0 @@
-/**
- * TASKMASTER WEBSOCKET UTILITIES
- * ==============================
- * 
- * Utilities for broadcasting TaskMaster state changes via WebSocket.
- * Integrates with the existing WebSocket system to provide real-time updates.
- */
-
-/**
- * Broadcast TaskMaster project update to all connected clients.
- *
- * The payload key is `projectId` post-migration so frontend listeners can
- * match notifications against the DB-assigned project identifier they
- * already use everywhere else.
- *
- * @param {WebSocket.Server} wss - WebSocket server instance
- * @param {string} projectId - DB id of the updated project
- * @param {Object} taskMasterData - Updated TaskMaster data
- */
-export function broadcastTaskMasterProjectUpdate(wss, projectId, taskMasterData) {
-    if (!wss || !projectId) {
-        console.warn('TaskMaster WebSocket broadcast: Missing wss or projectId');
-        return;
-    }
-
-    const message = {
-        type: 'taskmaster-project-updated',
-        projectId,
-        taskMasterData,
-        timestamp: new Date().toISOString()
-    };
-
-    
-    wss.clients.forEach((client) => {
-        if (client.readyState === 1) { // WebSocket.OPEN
-            try {
-                client.send(JSON.stringify(message));
-            } catch (error) {
-                console.error('Error sending TaskMaster project update:', error);
-            }
-        }
-    });
-}
-
-/**
- * Broadcast TaskMaster tasks update for a specific project.
- *
- * @param {WebSocket.Server} wss - WebSocket server instance
- * @param {string} projectId - DB id of the project with updated tasks
- * @param {Object} tasksData - Updated tasks data
- */
-export function broadcastTaskMasterTasksUpdate(wss, projectId, tasksData) {
-    if (!wss || !projectId) {
-        console.warn('TaskMaster WebSocket broadcast: Missing wss or projectId');
-        return;
-    }
-
-    const message = {
-        type: 'taskmaster-tasks-updated',
-        projectId,
-        tasksData,
-        timestamp: new Date().toISOString()
-    };
-
-    
-    wss.clients.forEach((client) => {
-        if (client.readyState === 1) { // WebSocket.OPEN
-            try {
-                client.send(JSON.stringify(message));
-            } catch (error) {
-                console.error('Error sending TaskMaster tasks update:', error);
-            }
-        }
-    });
-}
-
-/**
- * Broadcast MCP server status change
- * @param {WebSocket.Server} wss - WebSocket server instance
- * @param {Object} mcpStatus - Updated MCP server status
- */
-export function broadcastMCPStatusChange(wss, mcpStatus) {
-    if (!wss) {
-        console.warn('TaskMaster WebSocket broadcast: Missing wss');
-        return;
-    }
-
-    const message = {
-        type: 'taskmaster-mcp-status-changed',
-        mcpStatus,
-        timestamp: new Date().toISOString()
-    };
-
-    
-    wss.clients.forEach((client) => {
-        if (client.readyState === 1) { // WebSocket.OPEN
-            try {
-                client.send(JSON.stringify(message));
-            } catch (error) {
-                console.error('Error sending TaskMaster MCP status update:', error);
-            }
-        }
-    });
-}
-
-/**
- * Broadcast general TaskMaster update notification
- * @param {WebSocket.Server} wss - WebSocket server instance
- * @param {string} updateType - Type of update (e.g., 'initialization', 'configuration')
- * @param {Object} data - Additional data about the update
- */
-export function broadcastTaskMasterUpdate(wss, updateType, data = {}) {
-    if (!wss || !updateType) {
-        console.warn('TaskMaster WebSocket broadcast: Missing wss or updateType');
-        return;
-    }
-
-    const message = {
-        type: 'taskmaster-update',
-        updateType,
-        data,
-        timestamp: new Date().toISOString()
-    };
-
-    
-    wss.clients.forEach((client) => {
-        if (client.readyState === 1) { // WebSocket.OPEN
-            try {
-                client.send(JSON.stringify(message));
-            } catch (error) {
-                console.error('Error sending TaskMaster update:', error);
-            }
-        }
-    });
-}

package/server/utils/url-detection.js

@@ -1,71 +0,0 @@
-const ANSI_ESCAPE_SEQUENCE_REGEX = /\x1B(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~]|\][^\x07]*(?:\x07|\x1B\\))/g;
-const TRAILING_URL_PUNCTUATION_REGEX = /[)\]}>.,;:!?]+$/;
-
-function stripAnsiSequences(value = '') {
-    return value.replace(ANSI_ESCAPE_SEQUENCE_REGEX, '');
-}
-
-function normalizeDetectedUrl(url) {
-    if (!url || typeof url !== 'string') return null;
-
-    const cleaned = url.trim().replace(TRAILING_URL_PUNCTUATION_REGEX, '');
-    if (!cleaned) return null;
-
-    try {
-        const parsed = new URL(cleaned);
-        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-            return null;
-        }
-        return parsed.toString();
-    } catch {
-        return null;
-    }
-}
-
-function extractUrlsFromText(value = '') {
-    const directMatches = value.match(/https?:\/\/[^\s<>"'`\\\x1b\x07]+/gi) || [];
-
-    // Handle wrapped terminal URLs split across lines by terminal width.
-    const wrappedMatches = [];
-    const continuationRegex = /^[A-Za-z0-9\-._~:/?#\[\]@!$&'()*+,;=%]+$/;
-    const lines = value.split(/\r?\n/);
-    for (let i = 0; i < lines.length; i++) {
-        const line = lines[i].trim();
-        const startMatch = line.match(/https?:\/\/[^\s<>"'`\\\x1b\x07]+/i);
-        if (!startMatch) continue;
-
-        let combined = startMatch[0];
-        let j = i + 1;
-        while (j < lines.length) {
-            const continuation = lines[j].trim();
-            if (!continuation) break;
-            if (!continuationRegex.test(continuation)) break;
-            combined += continuation;
-            j++;
-        }
-
-        wrappedMatches.push(combined.replace(/\r?\n\s*/g, ''));
-    }
-
-    return Array.from(new Set([...directMatches, ...wrappedMatches]));
-}
-
-function shouldAutoOpenUrlFromOutput(value = '') {
-    const normalized = value.toLowerCase();
-    return (
-        normalized.includes('browser didn\'t open') ||
-        normalized.includes('open this url') ||
-        normalized.includes('continue in your browser') ||
-        normalized.includes('press enter to open') ||
-        normalized.includes('open_url:')
-    );
-}
-
-export {
-    ANSI_ESCAPE_SEQUENCE_REGEX,
-    TRAILING_URL_PUNCTUATION_REGEX,
-    stripAnsiSequences,
-    normalizeDetectedUrl,
-    extractUrlsFromText,
-    shouldAutoOpenUrlFromOutput
-};

package/server/voice-proxy.js

@@ -1,224 +0,0 @@
-// Optional voice proxy — forwards STT/TTS to an OpenAI-compatible audio backend.
-//
-// The backend is whatever the user points at: OpenAI, Groq, or a local server
-// (LocalAI / Speaches / Kokoro-FastAPI / openedai-speech / etc.). It must expose the
-// standard OpenAI audio endpoints:
-//     POST {base}/audio/transcriptions   (multipart 'file' + 'model')      -> { text }
-//     POST {base}/audio/speech           ({ model, voice, input })         -> audio bytes
-//
-// Config is resolved per-request from headers (set by the client's voice settings),
-// falling back to server env defaults. Mounted at /api/voice behind authenticateToken.
-import { Readable } from 'node:stream';
-
-import express from 'express';
-
-const ENV = {
-  baseUrl: (process.env.VOICE_API_BASE_URL || '').replace(/\/$/, ''),
-  apiKey: process.env.VOICE_API_KEY || '',
-  sttModel: process.env.VOICE_STT_MODEL || 'whisper-1',
-  ttsModel: process.env.VOICE_TTS_MODEL || 'tts-1',
-  ttsVoice: process.env.VOICE_TTS_VOICE || 'alloy',
-};
-
-/**
- * Resolve the voice backend config for a request. Client headers (set from the
- * user's in-app voice settings) take precedence over the server env defaults.
- * @param {import('express').Request} req
- * @returns {{baseUrl: string, apiKey: string, sttModel: string, ttsModel: string, ttsVoice: string, ttsFormat: string}}
- */
-function resolveConfig(req) {
-  const h = req.headers;
-  return {
-    // Security: do not allow clients to control the outbound backend host.
-    // Always use the server-side configured base URL.
-    baseUrl: ENV.baseUrl,
-    apiKey: String(h['x-voice-api-key'] || '') || ENV.apiKey,
-    sttModel: String(h['x-voice-stt-model'] || '') || ENV.sttModel,
-    ttsModel: String(h['x-voice-tts-model'] || '') || ENV.ttsModel,
-    ttsVoice: String(h['x-voice-tts-voice'] || '') || ENV.ttsVoice,
-    ttsFormat: String(h['x-voice-tts-format'] || '').trim(),
-  };
-}
-
-const router = express.Router();
-
-// Generous by default — local TTS can synthesize long messages at ~real-time on CPU.
-// Guard against a non-numeric/zero override that would make setTimeout fire immediately.
-const DEFAULT_VOICE_TIMEOUT_MS = 300000;
-const _parsedTimeout = Number(process.env.VOICE_TIMEOUT_MS);
-const VOICE_TIMEOUT_MS = Number.isFinite(_parsedTimeout) && _parsedTimeout > 0
-  ? _parsedTimeout
-  : DEFAULT_VOICE_TIMEOUT_MS;
-
-/**
- * fetch() with an AbortController timeout so a stalled backend can't hold the
- * request open indefinitely. Aborts after VOICE_TIMEOUT_MS.
- * @param {string} url
- * @param {RequestInit} [options]
- * @returns {Promise<Response>}
- */
-async function fetchWithTimeout(url, options = {}) {
-  const parsed = new URL(url);
-  if (!['http:', 'https:'].includes(parsed.protocol) || !isAllowedBackendUrl(parsed.origin)) {
-    throw new Error('Blocked outbound voice backend URL');
-  }
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), VOICE_TIMEOUT_MS);
-  try {
-    return await fetch(parsed.toString(), { redirect: 'manual', ...options, signal: controller.signal });
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
-/**
- * Turn a backend fetch failure into a clear, actionable client response:
- * 504 on timeout (AbortError), 502 otherwise.
- * @param {import('express').Response} res
- * @param {Error} e
- */
-function backendError(res, e) {
-  if (e && e.name === 'AbortError') {
-    return res.status(504).json({
-      error: `Voice backend timed out after ${Math.round(VOICE_TIMEOUT_MS / 1000)}s. Check your voice backend.`,
-    });
-  }
-  return res.status(502).json({ error: `Voice backend unreachable: ${e.message}` });
-}
-
-/**
- * SSRF guard for the user-configurable backend URL: allow http/https only and
- * block the link-local / cloud-metadata range (169.254.x). localhost and private
- * ranges are allowed on purpose so users can point at a local voice server
- * (LocalAI, Speaches, Kokoro-FastAPI, etc.).
- * @param {string} raw
- * @returns {boolean}
- */
-function isAllowedBackendUrl(raw) {
-  let u;
-  try {
-    u = new URL(raw);
-  } catch {
-    return false;
-  }
-  if (u.protocol !== 'http:' && u.protocol !== 'https:') return false;
-  if (u.hostname === '169.254.169.254' || u.hostname.startsWith('169.254.')) return false;
-  return true;
-}
-
-/**
- * Relay an upstream (backend) error to the client without making an upstream
- * 401/403 look like the user's own app login failed.
- * @param {import('express').Response} res
- * @param {number} status
- * @param {string} [text]
- */
-function upstreamError(res, status, text) {
-  if (status === 401 || status === 403) {
-    return res.status(502).json({ error: 'Voice backend rejected the request (check the API key).' });
-  }
-  return res.status(status).json({ error: text || 'voice backend error' });
-}
-
-let _upload = null;
-/**
- * Lazily build a memory-storage multer instance (25 MB cap) for audio uploads,
- * so multer is only imported when the voice feature is actually used.
- * @returns {Promise<import('multer').Multer>}
- */
-async function getUpload() {
-  if (!_upload) {
-    const multer = (await import('multer')).default;
-    _upload = multer({ storage: multer.memoryStorage(), limits: { fileSize: 25 * 1024 * 1024 } });
-  }
-  return _upload;
-}
-
-/**
- * Build the Authorization header for the backend, or an empty object when no
- * key is configured (e.g. a local server that needs none).
- * @param {string} apiKey
- * @returns {Record<string, string>}
- */
-function authHeader(apiKey) {
-  return apiKey ? { Authorization: `Bearer ${apiKey}` } : {};
-}
-
-/**
- * GET /api/voice/health -> { configured } (true when a backend base URL is set).
- */
-router.get('/health', (req, res) => {
-  res.json({ configured: Boolean(resolveConfig(req).baseUrl) });
-});
-
-/**
- * POST /api/voice/transcribe (multipart 'audio') -> { text }.
- * Forwards the uploaded audio to the backend's /audio/transcriptions endpoint.
- */
-router.post('/transcribe', async (req, res) => {
-  const cfg = resolveConfig(req);
-  if (!cfg.baseUrl) return res.status(503).json({ error: 'No voice backend configured' });
-  if (!isAllowedBackendUrl(cfg.baseUrl)) return res.status(400).json({ error: 'Invalid voice backend URL.' });
-  const upload = await getUpload();
-  upload.single('audio')(req, res, async (err) => {
-    if (err) return res.status(400).json({ error: err.message });
-    if (!req.file) return res.status(400).json({ error: 'No audio uploaded' });
-    try {
-      const fd = new FormData();
-      fd.append(
-        'file',
-        new Blob([req.file.buffer], { type: req.file.mimetype || 'audio/webm' }),
-        req.file.originalname || 'recording.webm',
-      );
-      fd.append('model', cfg.sttModel);
-      const r = await fetchWithTimeout(`${cfg.baseUrl}/audio/transcriptions`, {
-        method: 'POST',
-        headers: authHeader(cfg.apiKey),
-        body: fd,
-      });
-      const text = await r.text();
-      if (!r.ok) return upstreamError(res, r.status, text);
-      let data;
-      try { data = JSON.parse(text); } catch { data = { text }; }
-      res.json({ text: data.text ?? '' });
-    } catch (e) {
-      backendError(res, e);
-    }
-  });
-});
-
-/**
- * POST /api/voice/tts { text } -> audio bytes.
- * Forwards the text to the backend's /audio/speech endpoint and streams the audio back.
- */
-router.post('/tts', async (req, res) => {
-  const cfg = resolveConfig(req);
-  if (!cfg.baseUrl) return res.status(503).json({ error: 'No voice backend configured' });
-  if (!isAllowedBackendUrl(cfg.baseUrl)) return res.status(400).json({ error: 'Invalid voice backend URL.' });
-  const text = req.body?.text;
-  if (typeof text !== 'string' || !text.trim()) return res.status(400).json({ error: 'text required' });
-  try {
-    const r = await fetchWithTimeout(`${cfg.baseUrl}/audio/speech`, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json', ...authHeader(cfg.apiKey) },
-      body: JSON.stringify({
-        model: cfg.ttsModel,
-        voice: cfg.ttsVoice,
-        input: text,
-        ...(cfg.ttsFormat ? { response_format: cfg.ttsFormat } : {}),
-      }),
-    });
-    if (!r.ok) {
-      const errText = await r.text().catch(() => 'tts failed');
-      return upstreamError(res, r.status, errText);
-    }
-    res.setHeader('Content-Type', r.headers.get('content-type') || 'audio/mpeg');
-    res.setHeader('Cache-Control', 'no-store');
-    if (!r.body) return res.end();
-    Readable.fromWeb(r.body).on('error', (error) => res.destroy(error)).pipe(res);
-  } catch (e) {
-    backendError(res, e);
-  }
-});
-
-export default router;