@jonnyhoo/ccs 1.0.0

package/dist/web-server/routes/proxy-routes.js

@@ -0,0 +1,154 @@
+"use strict";
+/**
+ * CLIProxy Server Routes - API endpoints for proxy configuration
+ *
+ * Provides REST endpoints for managing CLIProxyAPI connection settings:
+ * - GET /api/cliproxy-server - Get proxy configuration
+ * - PUT /api/cliproxy-server - Update proxy configuration
+ * - POST /api/cliproxy-server/test - Test remote connection
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const unified_config_loader_1 = require("../../config/unified-config-loader");
+const remote_proxy_client_1 = require("../../cliproxy/remote-proxy-client");
+const proxy_lifecycle_service_1 = require("../../cliproxy/services/proxy-lifecycle-service");
+const platform_detector_1 = require("../../cliproxy/platform-detector");
+const unified_config_types_1 = require("../../config/unified-config-types");
+const router = (0, express_1.Router)();
+/**
+ * GET /api/cliproxy-server - Get proxy configuration
+ */
+router.get('/', async (_req, res) => {
+    try {
+        const config = await (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+        res.json(config.cliproxy_server || unified_config_types_1.DEFAULT_CLIPROXY_SERVER_CONFIG);
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to load proxy config:', error);
+        res.status(500).json({ error: 'Failed to load proxy config' });
+    }
+});
+/**
+ * PUT /api/cliproxy-server - Update proxy configuration
+ */
+router.put('/', async (req, res) => {
+    try {
+        const config = await (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+        const updates = req.body;
+        // Deep merge with defaults and current config
+        config.cliproxy_server = {
+            remote: {
+                ...unified_config_types_1.DEFAULT_CLIPROXY_SERVER_CONFIG.remote,
+                ...config.cliproxy_server?.remote,
+                ...updates.remote,
+            },
+            fallback: {
+                ...unified_config_types_1.DEFAULT_CLIPROXY_SERVER_CONFIG.fallback,
+                ...config.cliproxy_server?.fallback,
+                ...updates.fallback,
+            },
+            local: {
+                ...unified_config_types_1.DEFAULT_CLIPROXY_SERVER_CONFIG.local,
+                ...config.cliproxy_server?.local,
+                ...updates.local,
+            },
+        };
+        await (0, unified_config_loader_1.saveUnifiedConfig)(config);
+        res.json(config.cliproxy_server);
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to save proxy config:', error);
+        res.status(500).json({ error: 'Failed to save proxy config' });
+    }
+});
+/**
+ * GET /api/cliproxy-server/backend - Get CLIProxy backend setting
+ * @returns {{ backend: 'original' | 'plus' }} Current backend configuration
+ */
+router.get('/backend', async (_req, res) => {
+    try {
+        const config = await (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+        res.json({ backend: config.cliproxy?.backend ?? platform_detector_1.DEFAULT_BACKEND });
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to load backend config:', error);
+        res.status(500).json({ error: 'Failed to load backend config' });
+    }
+});
+/**
+ * PUT /api/cliproxy-server/backend - Update CLIProxy backend setting
+ * @param {Object} req.body - Request body
+ * @param {'original' | 'plus'} req.body.backend - Backend to switch to
+ * @param {boolean} [req.body.force=false] - Force change even if proxy is running
+ * @returns {{ backend: 'original' | 'plus' }} Updated backend configuration
+ * @throws {400} Invalid backend value
+ * @throws {409} Proxy is running (unless force=true)
+ */
+router.put('/backend', async (req, res) => {
+    try {
+        const { backend, force } = req.body;
+        if (backend !== 'original' && backend !== 'plus') {
+            res.status(400).json({ error: 'Invalid backend. Must be "original" or "plus"' });
+            return;
+        }
+        // Check if proxy is running - warn about restart requirement
+        const config = await (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+        const currentBackend = config.cliproxy?.backend ?? platform_detector_1.DEFAULT_BACKEND;
+        if (currentBackend !== backend && (0, proxy_lifecycle_service_1.isProxyRunning)() && !force) {
+            res.status(409).json({
+                error: 'Proxy is running. Stop proxy first or use force=true to change backend.',
+                proxyRunning: true,
+                currentBackend,
+            });
+            return;
+        }
+        if (!config.cliproxy) {
+            config.cliproxy = {
+                backend,
+                oauth_accounts: {},
+                providers: ['gemini', 'codex', 'agy', 'qwen', 'iflow', 'kiro', 'ghcp'],
+                variants: {},
+            };
+        }
+        else {
+            config.cliproxy.backend = backend;
+        }
+        await (0, unified_config_loader_1.saveUnifiedConfig)(config);
+        res.json({ backend });
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to save backend config:', error);
+        res.status(500).json({ error: 'Failed to save backend config' });
+    }
+});
+/**
+ * POST /api/cliproxy-server/test - Test remote proxy connection
+ */
+router.post('/test', async (req, res) => {
+    try {
+        const { host, port, protocol, authToken, allowSelfSigned } = req.body;
+        // Host is required, port is optional (uses protocol defaults)
+        if (!host) {
+            res.status(400).json({ error: 'Host is required' });
+            return;
+        }
+        // Parse port - treat empty string, 0, null as "use default"
+        const parsedPort = port && port !== '' ? parseInt(String(port), 10) : undefined;
+        const effectivePort = parsedPort && !isNaN(parsedPort) && parsedPort > 0 ? parsedPort : undefined;
+        const status = await (0, remote_proxy_client_1.testConnection)({
+            host,
+            port: effectivePort,
+            protocol: protocol || 'http',
+            authToken,
+            allowSelfSigned: allowSelfSigned || false,
+            timeout: 5000,
+        });
+        res.json(status);
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to test connection:', error);
+        res.status(500).json({ error: 'Failed to test connection' });
+    }
+});
+exports.default = router;
+//# sourceMappingURL=proxy-routes.js.map

package/dist/web-server/routes/proxy-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-routes.js","sourceRoot":"","sources":["../../../src/web-server/routes/proxy-routes.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAEH,qCAAoD;AACpD,8EAAkG;AAClG,4EAAoE;AACpE,6FAAiF;AACjF,wEAAmE;AACnE,4EAG2C;AAE3C,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;AAExB;;GAEG;AACH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;IACrD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,iDAAyB,GAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,qDAA8B,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAC;QAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,iDAAyB,GAAE,CAAC;QACjD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAqC,CAAC;QAE1D,8CAA8C;QAC9C,MAAM,CAAC,eAAe,GAAG;YACvB,MAAM,EAAE;gBACN,GAAG,qDAA8B,CAAC,MAAM;gBACxC,GAAG,MAAM,CAAC,eAAe,EAAE,MAAM;gBACjC,GAAG,OAAO,CAAC,MAAM;aAClB;YACD,QAAQ,EAAE;gBACR,GAAG,qDAA8B,CAAC,QAAQ;gBAC1C,GAAG,MAAM,CAAC,eAAe,EAAE,QAAQ;gBACnC,GAAG,OAAO,CAAC,QAAQ;aACpB;YACD,KAAK,EAAE;gBACL,GAAG,qDAA8B,CAAC,KAAK;gBACvC,GAAG,MAAM,CAAC,eAAe,EAAE,KAAK;gBAChC,GAAG,OAAO,CAAC,KAAK;aACjB;SACF,CAAC;QAEF,MAAM,IAAA,yCAAiB,EAAC,MAAM,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAC;QAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,iDAAyB,GAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,mCAAe,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACpC,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,6DAA6D;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAA,iDAAyB,GAAE,CAAC;QACjD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,mCAAe,CAAC;QACnE,IAAI,cAAc,KAAK,OAAO,IAAI,IAAA,wCAAc,GAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,yEAAyE;gBAChF,YAAY,EAAE,IAAI;gBAClB,cAAc;aACf,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,QAAQ,GAAG;gBAChB,OAAO;gBACP,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;gBACtE,QAAQ,EAAE,EAAE;aACb,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;QACpC,CAAC;QAED,MAAM,IAAA,yCAAiB,EAAC,MAAM,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtE,8DAA8D;QAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,4DAA4D;QAC5D,MAAM,UAAU,GAAG,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,aAAa,GACjB,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAc,EAAC;YAClC,IAAI;YACJ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,QAAQ,IAAI,MAAM;YAC5B,SAAS;YACT,eAAe,EAAE,eAAe,IAAI,KAAK;YACzC,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAC;QAC5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,kBAAe,MAAM,CAAC"}

package/dist/web-server/routes/route-helpers.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Route Helpers - Shared utility functions for route handlers
+ */
+import type { Config } from '../../types/config';
+/** Model mapping for API profiles */
+export interface ModelMapping {
+    model?: string;
+    opusModel?: string;
+    sonnetModel?: string;
+    haikuModel?: string;
+}
+/**
+ * Read config safely with fallback.
+ * Uses loadConfigSafe which supports both unified (config.yaml) and legacy (config.json).
+ */
+export declare function readConfigSafe(): Config;
+/**
+ * Write config atomically
+ */
+export declare function writeConfig(config: Config): void;
+/**
+ * Check if profile is configured (has valid settings file)
+ */
+export declare function isConfigured(profileName: string, config: Config): boolean;
+/**
+ * Create settings file for profile
+ */
+export declare function createSettingsFile(name: string, baseUrl: string, apiKey: string, models?: ModelMapping): string;
+/**
+ * Update settings file
+ */
+export declare function updateSettingsFile(name: string, updates: {
+    baseUrl?: string;
+    apiKey?: string;
+    model?: string;
+    opusModel?: string;
+    sonnetModel?: string;
+    haikuModel?: string;
+}): void;
+/**
+ * Security: Validate file path is within allowed directories
+ * - ~/.ccs/ directory: read/write allowed
+ * - ~/.claude/settings.json: read-only
+ */
+export declare function validateFilePath(filePath: string): {
+    valid: boolean;
+    readonly: boolean;
+    error?: string;
+};
+//# sourceMappingURL=route-helpers.d.ts.map

package/dist/web-server/routes/route-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../../src/web-server/routes/route-helpers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,MAAM,EAAY,MAAM,oBAAoB,CAAC;AAE3D,qCAAqC;AACrC,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAMvC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAKhD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAazE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,YAAiB,GACxB,MAAM,CAiBR;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,IAAI,CAyDN;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAsBA"}

package/dist/web-server/routes/route-helpers.js

@@ -0,0 +1,179 @@
+"use strict";
+/**
+ * Route Helpers - Shared utility functions for route handlers
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateFilePath = exports.updateSettingsFile = exports.createSettingsFile = exports.isConfigured = exports.writeConfig = exports.readConfigSafe = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_manager_1 = require("../../utils/config-manager");
+const helpers_1 = require("../../utils/helpers");
+/**
+ * Read config safely with fallback.
+ * Uses loadConfigSafe which supports both unified (config.yaml) and legacy (config.json).
+ */
+function readConfigSafe() {
+    try {
+        return (0, config_manager_1.loadConfigSafe)();
+    }
+    catch {
+        return { profiles: {} };
+    }
+}
+exports.readConfigSafe = readConfigSafe;
+/**
+ * Write config atomically
+ */
+function writeConfig(config) {
+    const configPath = (0, config_manager_1.getConfigPath)();
+    const tempPath = configPath + '.tmp';
+    fs.writeFileSync(tempPath, JSON.stringify(config, null, 2) + '\n');
+    fs.renameSync(tempPath, configPath);
+}
+exports.writeConfig = writeConfig;
+/**
+ * Check if profile is configured (has valid settings file)
+ */
+function isConfigured(profileName, config) {
+    const settingsPath = config.profiles[profileName];
+    if (!settingsPath)
+        return false;
+    try {
+        const expandedPath = (0, helpers_1.expandPath)(settingsPath);
+        if (!fs.existsSync(expandedPath))
+            return false;
+        const settings = (0, config_manager_1.loadSettings)(expandedPath);
+        return !!(settings.env?.ANTHROPIC_BASE_URL && settings.env?.ANTHROPIC_AUTH_TOKEN);
+    }
+    catch {
+        return false;
+    }
+}
+exports.isConfigured = isConfigured;
+/**
+ * Create settings file for profile
+ */
+function createSettingsFile(name, baseUrl, apiKey, models = {}) {
+    const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
+    const { model, opusModel, sonnetModel, haikuModel } = models;
+    const settings = {
+        env: {
+            ANTHROPIC_BASE_URL: baseUrl,
+            ANTHROPIC_AUTH_TOKEN: apiKey,
+            ...(model && { ANTHROPIC_MODEL: model }),
+            ...(opusModel && { ANTHROPIC_DEFAULT_OPUS_MODEL: opusModel }),
+            ...(sonnetModel && { ANTHROPIC_DEFAULT_SONNET_MODEL: sonnetModel }),
+            ...(haikuModel && { ANTHROPIC_DEFAULT_HAIKU_MODEL: haikuModel }),
+        },
+    };
+    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+    return `~/.ccs/${name}.settings.json`;
+}
+exports.createSettingsFile = createSettingsFile;
+/**
+ * Update settings file
+ */
+function updateSettingsFile(name, updates) {
+    const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
+    if (!fs.existsSync(settingsPath)) {
+        throw new Error('Settings file not found');
+    }
+    const settings = (0, config_manager_1.loadSettings)(settingsPath);
+    if (updates.baseUrl) {
+        settings.env = settings.env || {};
+        settings.env.ANTHROPIC_BASE_URL = updates.baseUrl;
+    }
+    if (updates.apiKey) {
+        settings.env = settings.env || {};
+        settings.env.ANTHROPIC_AUTH_TOKEN = updates.apiKey;
+    }
+    if (updates.model !== undefined) {
+        settings.env = settings.env || {};
+        if (updates.model) {
+            settings.env.ANTHROPIC_MODEL = updates.model;
+        }
+        else {
+            delete settings.env.ANTHROPIC_MODEL;
+        }
+    }
+    // Handle model mapping fields
+    if (updates.opusModel !== undefined) {
+        settings.env = settings.env || {};
+        if (updates.opusModel) {
+            settings.env.ANTHROPIC_DEFAULT_OPUS_MODEL = updates.opusModel;
+        }
+        else {
+            delete settings.env.ANTHROPIC_DEFAULT_OPUS_MODEL;
+        }
+    }
+    if (updates.sonnetModel !== undefined) {
+        settings.env = settings.env || {};
+        if (updates.sonnetModel) {
+            settings.env.ANTHROPIC_DEFAULT_SONNET_MODEL = updates.sonnetModel;
+        }
+        else {
+            delete settings.env.ANTHROPIC_DEFAULT_SONNET_MODEL;
+        }
+    }
+    if (updates.haikuModel !== undefined) {
+        settings.env = settings.env || {};
+        if (updates.haikuModel) {
+            settings.env.ANTHROPIC_DEFAULT_HAIKU_MODEL = updates.haikuModel;
+        }
+        else {
+            delete settings.env.ANTHROPIC_DEFAULT_HAIKU_MODEL;
+        }
+    }
+    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+}
+exports.updateSettingsFile = updateSettingsFile;
+/**
+ * Security: Validate file path is within allowed directories
+ * - ~/.ccs/ directory: read/write allowed
+ * - ~/.claude/settings.json: read-only
+ */
+function validateFilePath(filePath) {
+    const expandedPath = (0, helpers_1.expandPath)(filePath);
+    const normalizedPath = path.normalize(expandedPath);
+    const ccsDir = (0, config_manager_1.getCcsDir)();
+    const claudeSettingsPath = (0, helpers_1.expandPath)('~/.claude/settings.json');
+    // Check if path is within ~/.ccs/
+    if (normalizedPath.startsWith(ccsDir)) {
+        // Block access to sensitive subdirectories
+        const relativePath = normalizedPath.slice(ccsDir.length);
+        if (relativePath.includes('/.git/') || relativePath.includes('/node_modules/')) {
+            return { valid: false, readonly: false, error: 'Access to this path is not allowed' };
+        }
+        return { valid: true, readonly: false };
+    }
+    // Allow read-only access to ~/.claude/settings.json
+    if (normalizedPath === claudeSettingsPath) {
+        return { valid: true, readonly: true };
+    }
+    return { valid: false, readonly: false, error: 'Access to this path is not allowed' };
+}
+exports.validateFilePath = validateFilePath;
+//# sourceMappingURL=route-helpers.js.map

package/dist/web-server/routes/route-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-helpers.js","sourceRoot":"","sources":["../../../src/web-server/routes/route-helpers.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,+DAAoG;AACpG,iDAAiD;AAWjD;;;GAGG;AACH,SAAgB,cAAc;IAC5B,IAAI,CAAC;QACH,OAAO,IAAA,+BAAc,GAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAND,wCAMC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,MAAc;IACxC,MAAM,UAAU,GAAG,IAAA,8BAAa,GAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;IACrC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AACtC,CAAC;AALD,kCAKC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,WAAmB,EAAE,MAAc;IAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAA,oBAAU,EAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/C,MAAM,QAAQ,GAAG,IAAA,6BAAY,EAAC,YAAY,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAbD,oCAaC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,IAAY,EACZ,OAAe,EACf,MAAc,EACd,SAAuB,EAAE;IAEzB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,0BAAS,GAAE,EAAE,GAAG,IAAI,gBAAgB,CAAC,CAAC;IACrE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAE7D,MAAM,QAAQ,GAAa;QACzB,GAAG,EAAE;YACH,kBAAkB,EAAE,OAAO;YAC3B,oBAAoB,EAAE,MAAM;YAC5B,GAAG,CAAC,KAAK,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACxC,GAAG,CAAC,SAAS,IAAI,EAAE,4BAA4B,EAAE,SAAS,EAAE,CAAC;YAC7D,GAAG,CAAC,WAAW,IAAI,EAAE,8BAA8B,EAAE,WAAW,EAAE,CAAC;YACnE,GAAG,CAAC,UAAU,IAAI,EAAE,6BAA6B,EAAE,UAAU,EAAE,CAAC;SACjE;KACF,CAAC;IAEF,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACzE,OAAO,UAAU,IAAI,gBAAgB,CAAC;AACxC,CAAC;AAtBD,gDAsBC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,IAAY,EACZ,OAOC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,0BAAS,GAAE,EAAE,GAAG,IAAI,gBAAgB,CAAC,CAAC;IAErE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,6BAAY,EAAC,YAAY,CAAC,CAAC;IAE5C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;QAClC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;QAClC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,QAAQ,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC;QACtC,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,QAAQ,CAAC,GAAG,CAAC,4BAA4B,GAAG,OAAO,CAAC,SAAS,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,OAAO,QAAQ,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,QAAQ,CAAC,GAAG,CAAC,8BAA8B,GAAG,OAAO,CAAC,WAAW,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,OAAO,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC;QACrD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,6BAA6B,GAAG,OAAO,CAAC,UAAU,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,OAAO,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAC;QACpD,CAAC;IACH,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC3E,CAAC;AAnED,gDAmEC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,QAAgB;IAK/C,MAAM,YAAY,GAAG,IAAA,oBAAU,EAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAA,0BAAS,GAAE,CAAC;IAC3B,MAAM,kBAAkB,GAAG,IAAA,oBAAU,EAAC,yBAAyB,CAAC,CAAC;IAEjE,kCAAkC;IAClC,IAAI,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,2CAA2C;QAC3C,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACxF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED,oDAAoD;IACpD,IAAI,cAAc,KAAK,kBAAkB,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;AACxF,CAAC;AA1BD,4CA0BC"}

package/dist/web-server/routes/settings-routes.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Settings Routes - Settings and preset management
+ */
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=settings-routes.d.ts.map

package/dist/web-server/routes/settings-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-routes.d.ts","sourceRoot":"","sources":["../../../src/web-server/routes/settings-routes.ts"],"names":[],"mappings":"AAAA;;GAEG;AAqBH,QAAA,MAAM,MAAM,4CAAW,CAAC;AA2axB,eAAe,MAAM,CAAC"}