@gemini-designer/mcp-server 0.1.2 → 0.1.29

package/src/config/index.ts

@@ -10,55 +10,51 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 
 const ConfigSchema = z.object({
-    // Mode: 'local' uses direct Gemini API, 'remote' uses gateway
-    mode: z.enum(['local', 'remote']).default('local'),
-
-    // Local provider: direct Gemini SDK, or OpenAI-compatible proxy (e.g. LiteLLM)
-    // Default to LiteLLM because it unlocks routing, retries, caching, and load balancing.
-    // If LiteLLM is not configured, we will automatically fall back to direct Gemini.
-    localProvider: z.enum(['gemini', 'litellm']).default('litellm'),
-
-    // API key for local mode (required if mode is 'local')
-    apiKey: z.string().optional(),
-
-    // Remote gateway endpoint (required if mode is 'remote')
-    remoteEndpoint: z.string().url().optional(),
-
-    // Remote API key for gateway authentication
-    remoteApiKey: z.string().optional(),
-
-    // Workspace paths that can be accessed
-    allowedPaths: z.array(z.string()).default([process.cwd()]),
-
-    // Default framework for generated code
-    defaultFramework: z
-        .enum(['vanilla', 'react', 'vue', 'svelte', 'nextjs'])
-        .default('react'),
-
-    // Gemini model to use (for local mode)
-    model: z.string().default('gemini-2.5-flash'),
-
-    // LiteLLM (or other OpenAI-compatible proxy) configuration for local mode
-    litellmEndpoint: z.string().url().optional(),
-    litellmApiKey: z.string().optional(),
-    litellmModel: z.string().optional(),
-
-    // Default accessibility level
-    accessibility: z.enum(['none', 'wcag-a', 'wcag-aa', 'wcag-aaa']).default('wcag-aa'),
-
-    // Responsive breakpoints
-    breakpoints: z
-        .record(z.number())
-        .default({
-            sm: 640,
-            md: 768,
-            lg: 1024,
-            xl: 1280,
-            '2xl': 1536,
-        }),
-
-    // Debug mode
-    debug: z.boolean().default(false),
+  // Mode: 'local' uses direct Gemini API, 'remote' uses gateway
+  mode: z.enum(['local', 'remote']).default('local'),
+
+  // Local provider: direct Gemini SDK, or OpenAI-compatible proxy (e.g. LiteLLM)
+  // Default to LiteLLM because it unlocks routing, retries, caching, and load balancing.
+  // If LiteLLM is not configured, we will automatically fall back to direct Gemini.
+  localProvider: z.enum(['gemini', 'litellm']).default('litellm'),
+
+  // API key for local mode (required if mode is 'local')
+  apiKey: z.string().optional(),
+
+  // Remote gateway endpoint (required if mode is 'remote')
+  remoteEndpoint: z.string().url().optional(),
+
+  // Remote API key for gateway authentication
+  remoteApiKey: z.string().optional(),
+
+  // Workspace paths that can be accessed
+  allowedPaths: z.array(z.string()).default([process.cwd()]),
+
+  // Default framework for generated code
+  defaultFramework: z.enum(['vanilla', 'react', 'vue', 'svelte', 'nextjs']).default('react'),
+
+  // Gemini model to use (for local mode)
+  model: z.string().default('gemini-2.5-flash'),
+
+  // LiteLLM (or other OpenAI-compatible proxy) configuration for local mode
+  litellmEndpoint: z.string().url().optional(),
+  litellmApiKey: z.string().optional(),
+  litellmModel: z.string().optional(),
+
+  // Default accessibility level
+  accessibility: z.enum(['none', 'wcag-a', 'wcag-aa', 'wcag-aaa']).default('wcag-aa'),
+
+  // Responsive breakpoints
+  breakpoints: z.record(z.number()).default({
+    sm: 640,
+    md: 768,
+    lg: 1024,
+    xl: 1280,
+    '2xl': 1536,
+  }),
+
+  // Debug mode
+  debug: z.boolean().default(false),
 });
 
 export type Config = z.infer<typeof ConfigSchema>;
@@ -67,171 +63,183 @@ export type Config = z.infer<typeof ConfigSchema>;
  * Load configuration from all sources
  */
 export function loadConfig(): Config {
-    const configFromFile = loadConfigFile();
-    const configFromEnv = loadConfigFromEnv();
-    const configFromArgs = loadConfigFromArgs();
-
-    // Merge configs with priority: args > env > file > defaults
-    const merged = {
-        ...configFromFile,
-        ...configFromEnv,
-        ...configFromArgs,
-    };
-
-    const result = ConfigSchema.safeParse(merged);
-
-    if (!result.success) {
-        console.error('[config] Invalid configuration:', result.error.format());
-        throw new Error('Invalid configuration');
-    }
-
-    // Apply smart defaults / fallbacks
-    // - We default to localProvider=litellm, but automatically fall back to direct Gemini
-    //   when LiteLLM isn't configured.
-    let cfg: Config = result.data;
-
-    if (cfg.mode === 'local') {
-        const hasLite = Boolean(cfg.litellmEndpoint);
-        const hasGemini = Boolean(cfg.apiKey);
-
-        if (cfg.localProvider === 'litellm' && !hasLite) {
-            if (hasGemini) {
-                if (cfg.debug) {
-                    console.error('[config] LITELLM_ENDPOINT missing; falling back to localProvider=gemini');
-                }
-                cfg = { ...cfg, localProvider: 'gemini' };
-            }
+  const configFromFile = loadConfigFile();
+  const configFromEnv = loadConfigFromEnv();
+  const configFromArgs = loadConfigFromArgs();
+
+  // Merge configs with priority: args > env > file > defaults
+  const merged = {
+    ...configFromFile,
+    ...configFromEnv,
+    ...configFromArgs,
+  };
+
+  const result = ConfigSchema.safeParse(merged);
+
+  if (!result.success) {
+    console.error('[config] Invalid configuration:', result.error.format());
+    throw new Error('Invalid configuration');
+  }
+
+  // Apply smart defaults / fallbacks
+  // - We default to localProvider=litellm, but automatically fall back to direct Gemini
+  //   when LiteLLM isn't configured.
+  let cfg: Config = result.data;
+
+  if (cfg.mode === 'local') {
+    const hasLite = Boolean(cfg.litellmEndpoint);
+    const hasGemini = Boolean(cfg.apiKey);
+
+    if (cfg.localProvider === 'litellm' && !hasLite) {
+      if (hasGemini) {
+        if (cfg.debug) {
+          console.error('[config] LITELLM_ENDPOINT missing; falling back to localProvider=gemini');
         }
+        cfg = { ...cfg, localProvider: 'gemini' };
+      }
+    }
 
-        if (cfg.localProvider === 'gemini' && !hasGemini) {
-            if (hasLite) {
-                if (cfg.debug) {
-                    console.error('[config] GEMINI_API_KEY missing; falling back to localProvider=litellm');
-                }
-                cfg = { ...cfg, localProvider: 'litellm' };
-            }
+    if (cfg.localProvider === 'gemini' && !hasGemini) {
+      if (hasLite) {
+        if (cfg.debug) {
+          console.error('[config] GEMINI_API_KEY missing; falling back to localProvider=litellm');
         }
+        cfg = { ...cfg, localProvider: 'litellm' };
+      }
+    }
 
-        // Validate mode-specific requirements after applying fallbacks
-        if (cfg.localProvider === 'gemini' && !cfg.apiKey) {
-            console.error('[config] Local mode (gemini) requires GEMINI_API_KEY environment variable');
-            throw new Error('Missing Gemini API key for local mode');
-        }
+    // Validate mode-specific requirements after applying fallbacks
+    if (cfg.localProvider === 'gemini' && !cfg.apiKey) {
+      console.error('[config] Local mode (gemini) requires GEMINI_API_KEY environment variable');
+      throw new Error('Missing Gemini API key for local mode');
+    }
 
-        if (cfg.localProvider === 'litellm' && !cfg.litellmEndpoint) {
-            console.error('[config] Local mode (litellm) requires LITELLM_ENDPOINT');
-            throw new Error('Missing LiteLLM endpoint for local mode');
-        }
+    if (cfg.localProvider === 'litellm' && !cfg.litellmEndpoint) {
+      console.error('[config] Local mode (litellm) requires LITELLM_ENDPOINT');
+      throw new Error('Missing LiteLLM endpoint for local mode');
     }
+  }
+
+  if (cfg.mode === 'remote' && !cfg.remoteEndpoint) {
+    console.error('[config] Remote mode requires GEMINI_DESIGNER_REMOTE_ENDPOINT');
+    throw new Error('Missing remote endpoint for remote mode');
+  }
 
-    if (cfg.mode === 'remote' && !cfg.remoteEndpoint) {
-        console.error('[config] Remote mode requires GEMINI_DESIGNER_REMOTE_ENDPOINT');
-        throw new Error('Missing remote endpoint for remote mode');
+  // Security: avoid sending API keys over plain HTTP except for local dev.
+  if (cfg.mode === 'remote' && cfg.remoteEndpoint) {
+    const u = new URL(cfg.remoteEndpoint);
+    const isLocalhost = u.hostname === 'localhost' || u.hostname === '127.0.0.1' || u.hostname === '::1';
+    if (u.protocol !== 'https:' && !(u.protocol === 'http:' && isLocalhost)) {
+      console.error(
+        '[config] GEMINI_DESIGNER_REMOTE_ENDPOINT must be https:// (or http://localhost for local dev)'
+      );
+      throw new Error('Insecure remote endpoint (HTTP)');
     }
+  }
 
-    return cfg;
+  return cfg;
 }
 
 /**
  * Load from .gemini-designer.json config file
  */
 function loadConfigFile(): Partial<Config> {
-    const configPath = path.join(process.cwd(), '.gemini-designer.json');
-
-    if (!fs.existsSync(configPath)) {
-        return {};
-    }
-
-    try {
-        const content = fs.readFileSync(configPath, 'utf-8');
-        return JSON.parse(content);
-    } catch (error) {
-        console.error('[config] Error reading config file:', error);
-        return {};
-    }
+  const configPath = path.join(process.cwd(), '.gemini-designer.json');
+
+  if (!fs.existsSync(configPath)) {
+    return {};
+  }
+
+  try {
+    const content = fs.readFileSync(configPath, 'utf-8');
+    return JSON.parse(content);
+  } catch (error) {
+    console.error('[config] Error reading config file:', error);
+    return {};
+  }
 }
 
 /**
  * Load from environment variables
  */
 function loadConfigFromEnv(): Partial<Config> {
-    const config: Partial<Config> = {};
+  const config: Partial<Config> = {};
 
-    if (process.env.GEMINI_API_KEY) {
-        config.apiKey = process.env.GEMINI_API_KEY;
-    }
+  if (process.env.GEMINI_API_KEY) {
+    config.apiKey = process.env.GEMINI_API_KEY;
+  }
 
-    if (process.env.GEMINI_DESIGNER_MODE) {
-        config.mode = process.env.GEMINI_DESIGNER_MODE as 'local' | 'remote';
-    }
+  if (process.env.GEMINI_DESIGNER_MODE) {
+    config.mode = process.env.GEMINI_DESIGNER_MODE as 'local' | 'remote';
+  }
 
-    if (process.env.GEMINI_DESIGNER_LOCAL_PROVIDER) {
-        config.localProvider = process.env.GEMINI_DESIGNER_LOCAL_PROVIDER as Config['localProvider'];
-    }
+  if (process.env.GEMINI_DESIGNER_LOCAL_PROVIDER) {
+    config.localProvider = process.env.GEMINI_DESIGNER_LOCAL_PROVIDER as Config['localProvider'];
+  }
 
-    if (process.env.GEMINI_DESIGNER_REMOTE_ENDPOINT) {
-        config.remoteEndpoint = process.env.GEMINI_DESIGNER_REMOTE_ENDPOINT;
-    }
+  if (process.env.GEMINI_DESIGNER_REMOTE_ENDPOINT) {
+    config.remoteEndpoint = process.env.GEMINI_DESIGNER_REMOTE_ENDPOINT;
+  }
 
-    if (process.env.GEMINI_DESIGNER_REMOTE_API_KEY) {
-        config.remoteApiKey = process.env.GEMINI_DESIGNER_REMOTE_API_KEY;
-    }
+  if (process.env.GEMINI_DESIGNER_REMOTE_API_KEY) {
+    config.remoteApiKey = process.env.GEMINI_DESIGNER_REMOTE_API_KEY;
+  }
 
-    if (process.env.GEMINI_DESIGNER_DEBUG === 'true') {
-        config.debug = true;
-    }
+  if (process.env.GEMINI_DESIGNER_DEBUG === 'true') {
+    config.debug = true;
+  }
 
-    if (process.env.GEMINI_DESIGNER_FRAMEWORK) {
-        config.defaultFramework = process.env.GEMINI_DESIGNER_FRAMEWORK as Config['defaultFramework'];
-    }
+  if (process.env.GEMINI_DESIGNER_FRAMEWORK) {
+    config.defaultFramework = process.env.GEMINI_DESIGNER_FRAMEWORK as Config['defaultFramework'];
+  }
 
-    if (process.env.GEMINI_MODEL) {
-        config.model = process.env.GEMINI_MODEL;
-    }
+  if (process.env.GEMINI_MODEL) {
+    config.model = process.env.GEMINI_MODEL;
+  }
 
-    if (process.env.LITELLM_ENDPOINT) {
-        config.litellmEndpoint = process.env.LITELLM_ENDPOINT;
-    }
+  if (process.env.LITELLM_ENDPOINT) {
+    config.litellmEndpoint = process.env.LITELLM_ENDPOINT;
+  }
 
-    if (process.env.LITELLM_API_KEY) {
-        config.litellmApiKey = process.env.LITELLM_API_KEY;
-    }
+  if (process.env.LITELLM_API_KEY) {
+    config.litellmApiKey = process.env.LITELLM_API_KEY;
+  }
 
-    if (process.env.LITELLM_MODEL) {
-        config.litellmModel = process.env.LITELLM_MODEL;
-    }
+  if (process.env.LITELLM_MODEL) {
+    config.litellmModel = process.env.LITELLM_MODEL;
+  }
 
-    return config;
+  return config;
 }
 
 /**
  * Load from CLI arguments
  */
 function loadConfigFromArgs(): Partial<Config> {
-    const args = process.argv.slice(2);
-    const config: Partial<Config> = {};
-
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-
-        if (arg === '--local') {
-            config.mode = 'local';
-        } else if (arg === '--remote') {
-            config.mode = 'remote';
-        } else if (arg === '--provider' && args[i + 1]) {
-            config.localProvider = args[++i] as Config['localProvider'];
-        } else if (arg === '--debug') {
-            config.debug = true;
-        } else if (arg === '--api-key' && args[i + 1]) {
-            config.apiKey = args[++i];
-        } else if (arg === '--litellm-endpoint' && args[i + 1]) {
-            config.litellmEndpoint = args[++i];
-        } else if (arg === '--litellm-model' && args[i + 1]) {
-            config.litellmModel = args[++i];
-        } else if (arg === '--endpoint' && args[i + 1]) {
-            config.remoteEndpoint = args[++i];
-        }
-    }
-
-    return config;
+  const args = process.argv.slice(2);
+  const config: Partial<Config> = {};
+
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+
+    if (arg === '--local') {
+      config.mode = 'local';
+    } else if (arg === '--remote') {
+      config.mode = 'remote';
+    } else if (arg === '--provider' && args[i + 1]) {
+      config.localProvider = args[++i] as Config['localProvider'];
+    } else if (arg === '--debug') {
+      config.debug = true;
+    } else if (arg === '--api-key' && args[i + 1]) {
+      config.apiKey = args[++i];
+    } else if (arg === '--litellm-endpoint' && args[i + 1]) {
+      config.litellmEndpoint = args[++i];
+    } else if (arg === '--litellm-model' && args[i + 1]) {
+      config.litellmModel = args[++i];
+    } else if (arg === '--endpoint' && args[i + 1]) {
+      config.remoteEndpoint = args[++i];
+    }
+  }
+
+  return config;
 }