@pixelbyte-software/pixcode 1.30.2 → 1.31.1

package/server/modules/providers/shared/mcp/mcp.provider.ts

@@ -1,151 +1,151 @@
-import path from 'node:path';
-
-import type { IProviderMcp } from '@/shared/interfaces.js';
-import type { LLMProvider, McpScope, McpTransport, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
-import { AppError } from '@/shared/utils.js';
-
-const resolveWorkspacePath = (workspacePath?: string): string =>
-  path.resolve(workspacePath ?? process.cwd());
-
-const normalizeServerName = (name: string): string => {
-  const normalized = name.trim();
-  if (!normalized) {
-    throw new AppError('MCP server name is required.', {
-      code: 'MCP_SERVER_NAME_REQUIRED',
-      statusCode: 400,
-    });
-  }
-
-  return normalized;
-};
-
-/**
- * Shared MCP provider for provider-specific config readers/writers.
- */
-export abstract class McpProvider implements IProviderMcp {
-  protected readonly provider: LLMProvider;
-  protected readonly supportedScopes: McpScope[];
-  protected readonly supportedTransports: McpTransport[];
-
-  protected constructor(
-    provider: LLMProvider,
-    supportedScopes: McpScope[],
-    supportedTransports: McpTransport[],
-  ) {
-    this.provider = provider;
-    this.supportedScopes = supportedScopes;
-    this.supportedTransports = supportedTransports;
-  }
-
-  async listServers(options?: { workspacePath?: string }): Promise<Record<McpScope, ProviderMcpServer[]>> {
-    const grouped: Record<McpScope, ProviderMcpServer[]> = {
-      user: [],
-      local: [],
-      project: [],
-    };
-
-    for (const scope of this.supportedScopes) {
-      grouped[scope] = await this.listServersForScope(scope, options);
-    }
-
-    return grouped;
-  }
-
-  async listServersForScope(
-    scope: McpScope,
-    options?: { workspacePath?: string },
-  ): Promise<ProviderMcpServer[]> {
-    if (!this.supportedScopes.includes(scope)) {
-      return [];
-    }
-
-    const workspacePath = resolveWorkspacePath(options?.workspacePath);
-    const scopedServers = await this.readScopedServers(scope, workspacePath);
-    return Object.entries(scopedServers)
-      .map(([name, rawConfig]) => this.normalizeServerConfig(scope, name, rawConfig))
-      .filter((entry): entry is ProviderMcpServer => entry !== null);
-  }
-
-  async upsertServer(input: UpsertProviderMcpServerInput): Promise<ProviderMcpServer> {
-    const scope = input.scope ?? 'project';
-    this.assertScopeAndTransport(scope, input.transport);
-
-    const workspacePath = resolveWorkspacePath(input.workspacePath);
-    const normalizedName = normalizeServerName(input.name);
-    const scopedServers = await this.readScopedServers(scope, workspacePath);
-    scopedServers[normalizedName] = this.buildServerConfig(input);
-    await this.writeScopedServers(scope, workspacePath, scopedServers);
-
-    return {
-      provider: this.provider,
-      name: normalizedName,
-      scope,
-      transport: input.transport,
-      command: input.command,
-      args: input.args,
-      env: input.env,
-      cwd: input.cwd,
-      url: input.url,
-      headers: input.headers,
-      envVars: input.envVars,
-      bearerTokenEnvVar: input.bearerTokenEnvVar,
-      envHttpHeaders: input.envHttpHeaders,
-    };
-  }
-
-  async removeServer(
-    input: { name: string; scope?: McpScope; workspacePath?: string },
-  ): Promise<{ removed: boolean; provider: LLMProvider; name: string; scope: McpScope }> {
-    const scope = input.scope ?? 'project';
-    this.assertScope(scope);
-
-    const workspacePath = resolveWorkspacePath(input.workspacePath);
-    const normalizedName = normalizeServerName(input.name);
-    const scopedServers = await this.readScopedServers(scope, workspacePath);
-    const removed = Object.prototype.hasOwnProperty.call(scopedServers, normalizedName);
-    if (removed) {
-      delete scopedServers[normalizedName];
-      await this.writeScopedServers(scope, workspacePath, scopedServers);
-    }
-
-    return { removed, provider: this.provider, name: normalizedName, scope };
-  }
-
-  protected abstract readScopedServers(
-    scope: McpScope,
-    workspacePath: string,
-  ): Promise<Record<string, unknown>>;
-
-  protected abstract writeScopedServers(
-    scope: McpScope,
-    workspacePath: string,
-    servers: Record<string, unknown>,
-  ): Promise<void>;
-
-  protected abstract buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown>;
-
-  protected abstract normalizeServerConfig(
-    scope: McpScope,
-    name: string,
-    rawConfig: unknown,
-  ): ProviderMcpServer | null;
-
-  protected assertScope(scope: McpScope): void {
-    if (!this.supportedScopes.includes(scope)) {
-      throw new AppError(`Provider "${this.provider}" does not support "${scope}" MCP scope.`, {
-        code: 'MCP_SCOPE_NOT_SUPPORTED',
-        statusCode: 400,
-      });
-    }
-  }
-
-  protected assertScopeAndTransport(scope: McpScope, transport: McpTransport): void {
-    this.assertScope(scope);
-    if (!this.supportedTransports.includes(transport)) {
-      throw new AppError(`Provider "${this.provider}" does not support "${transport}" MCP transport.`, {
-        code: 'MCP_TRANSPORT_NOT_SUPPORTED',
-        statusCode: 400,
-      });
-    }
-  }
-}
+import path from 'node:path';
+
+import type { IProviderMcp } from '@/shared/interfaces.js';
+import type { LLMProvider, McpScope, McpTransport, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
+import { AppError } from '@/shared/utils.js';
+
+const resolveWorkspacePath = (workspacePath?: string): string =>
+  path.resolve(workspacePath ?? process.cwd());
+
+const normalizeServerName = (name: string): string => {
+  const normalized = name.trim();
+  if (!normalized) {
+    throw new AppError('MCP server name is required.', {
+      code: 'MCP_SERVER_NAME_REQUIRED',
+      statusCode: 400,
+    });
+  }
+
+  return normalized;
+};
+
+/**
+ * Shared MCP provider for provider-specific config readers/writers.
+ */
+export abstract class McpProvider implements IProviderMcp {
+  protected readonly provider: LLMProvider;
+  protected readonly supportedScopes: McpScope[];
+  protected readonly supportedTransports: McpTransport[];
+
+  protected constructor(
+    provider: LLMProvider,
+    supportedScopes: McpScope[],
+    supportedTransports: McpTransport[],
+  ) {
+    this.provider = provider;
+    this.supportedScopes = supportedScopes;
+    this.supportedTransports = supportedTransports;
+  }
+
+  async listServers(options?: { workspacePath?: string }): Promise<Record<McpScope, ProviderMcpServer[]>> {
+    const grouped: Record<McpScope, ProviderMcpServer[]> = {
+      user: [],
+      local: [],
+      project: [],
+    };
+
+    for (const scope of this.supportedScopes) {
+      grouped[scope] = await this.listServersForScope(scope, options);
+    }
+
+    return grouped;
+  }
+
+  async listServersForScope(
+    scope: McpScope,
+    options?: { workspacePath?: string },
+  ): Promise<ProviderMcpServer[]> {
+    if (!this.supportedScopes.includes(scope)) {
+      return [];
+    }
+
+    const workspacePath = resolveWorkspacePath(options?.workspacePath);
+    const scopedServers = await this.readScopedServers(scope, workspacePath);
+    return Object.entries(scopedServers)
+      .map(([name, rawConfig]) => this.normalizeServerConfig(scope, name, rawConfig))
+      .filter((entry): entry is ProviderMcpServer => entry !== null);
+  }
+
+  async upsertServer(input: UpsertProviderMcpServerInput): Promise<ProviderMcpServer> {
+    const scope = input.scope ?? 'project';
+    this.assertScopeAndTransport(scope, input.transport);
+
+    const workspacePath = resolveWorkspacePath(input.workspacePath);
+    const normalizedName = normalizeServerName(input.name);
+    const scopedServers = await this.readScopedServers(scope, workspacePath);
+    scopedServers[normalizedName] = this.buildServerConfig(input);
+    await this.writeScopedServers(scope, workspacePath, scopedServers);
+
+    return {
+      provider: this.provider,
+      name: normalizedName,
+      scope,
+      transport: input.transport,
+      command: input.command,
+      args: input.args,
+      env: input.env,
+      cwd: input.cwd,
+      url: input.url,
+      headers: input.headers,
+      envVars: input.envVars,
+      bearerTokenEnvVar: input.bearerTokenEnvVar,
+      envHttpHeaders: input.envHttpHeaders,
+    };
+  }
+
+  async removeServer(
+    input: { name: string; scope?: McpScope; workspacePath?: string },
+  ): Promise<{ removed: boolean; provider: LLMProvider; name: string; scope: McpScope }> {
+    const scope = input.scope ?? 'project';
+    this.assertScope(scope);
+
+    const workspacePath = resolveWorkspacePath(input.workspacePath);
+    const normalizedName = normalizeServerName(input.name);
+    const scopedServers = await this.readScopedServers(scope, workspacePath);
+    const removed = Object.prototype.hasOwnProperty.call(scopedServers, normalizedName);
+    if (removed) {
+      delete scopedServers[normalizedName];
+      await this.writeScopedServers(scope, workspacePath, scopedServers);
+    }
+
+    return { removed, provider: this.provider, name: normalizedName, scope };
+  }
+
+  protected abstract readScopedServers(
+    scope: McpScope,
+    workspacePath: string,
+  ): Promise<Record<string, unknown>>;
+
+  protected abstract writeScopedServers(
+    scope: McpScope,
+    workspacePath: string,
+    servers: Record<string, unknown>,
+  ): Promise<void>;
+
+  protected abstract buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown>;
+
+  protected abstract normalizeServerConfig(
+    scope: McpScope,
+    name: string,
+    rawConfig: unknown,
+  ): ProviderMcpServer | null;
+
+  protected assertScope(scope: McpScope): void {
+    if (!this.supportedScopes.includes(scope)) {
+      throw new AppError(`Provider "${this.provider}" does not support "${scope}" MCP scope.`, {
+        code: 'MCP_SCOPE_NOT_SUPPORTED',
+        statusCode: 400,
+      });
+    }
+  }
+
+  protected assertScopeAndTransport(scope: McpScope, transport: McpTransport): void {
+    this.assertScope(scope);
+    if (!this.supportedTransports.includes(transport)) {
+      throw new AppError(`Provider "${this.provider}" does not support "${transport}" MCP transport.`, {
+        code: 'MCP_TRANSPORT_NOT_SUPPORTED',
+        statusCode: 400,
+      });
+    }
+  }
+}

package/server/modules/providers/shared/provider-configs.ts

@@ -0,0 +1,118 @@
+/**
+ * Registry of user-editable config files per provider CLI.
+ *
+ * This is the single source of truth for the Settings → Agents →
+ * Configuration tab. Adding a new provider? Append a row here and the
+ * UI + API pick it up — no component changes required.
+ *
+ * Rules:
+ *   - `relativePath` is relative to the user's home directory.
+ *     We never accept absolute paths from the client; the server
+ *     resolves these explicitly so path traversal is impossible.
+ *   - `format` drives the CodeMirror language extension on the client.
+ *   - `readonly: true` hides the Save button and the server rejects
+ *     writes. Use it for files the CLI owns (e.g. OAuth tokens).
+ *   - `description` is shown as a subtle caption under the editor.
+ */
+
+export type ProviderConfigFormat = 'json' | 'toml' | 'env' | 'text';
+
+export type ProviderConfigFile = {
+  id: string;
+  label: string;
+  relativePath: string;
+  format: ProviderConfigFormat;
+  readonly?: boolean;
+  description?: string;
+};
+
+export const PROVIDER_CONFIG_FILES: Record<string, ProviderConfigFile[]> = {
+  claude: [
+    {
+      id: 'settings',
+      label: 'settings.json',
+      relativePath: '.claude/settings.json',
+      format: 'json',
+      description: 'Main Claude Code settings — default model, system prompt, tool policy.',
+    },
+    {
+      id: 'env',
+      label: '.env',
+      relativePath: '.claude/.env',
+      format: 'env',
+      description: 'Environment variables loaded when Claude runs (e.g. ANTHROPIC_API_KEY).',
+    },
+  ],
+  codex: [
+    {
+      id: 'config',
+      label: 'config.toml',
+      relativePath: '.codex/config.toml',
+      format: 'toml',
+      description: 'Main Codex CLI config — models, MCP servers, approval policy, sandbox mode.',
+    },
+    {
+      id: 'env',
+      label: '.env',
+      relativePath: '.codex/.env',
+      format: 'env',
+      description: 'Environment variables (OPENAI_API_KEY, OPENAI_BASE_URL, …).',
+    },
+    {
+      id: 'auth',
+      label: 'auth.json',
+      relativePath: '.codex/auth.json',
+      format: 'json',
+      readonly: true,
+      description: 'OAuth tokens managed by `codex login`. Read-only; editing here would corrupt the session.',
+    },
+  ],
+  cursor: [
+    {
+      id: 'env',
+      label: '.env',
+      relativePath: '.cursor/.env',
+      format: 'env',
+      description: 'Cursor CLI environment variables.',
+    },
+  ],
+  gemini: [
+    {
+      id: 'settings',
+      label: 'settings.json',
+      relativePath: '.gemini/settings.json',
+      format: 'json',
+      description: 'Main Gemini CLI settings — selected model, MCP servers, tool approval mode.',
+    },
+    {
+      id: 'env',
+      label: '.env',
+      relativePath: '.gemini/.env',
+      format: 'env',
+      description: 'Environment variables (GOOGLE_API_KEY, GEMINI_API_KEY, …).',
+    },
+  ],
+  qwen: [
+    {
+      id: 'settings',
+      label: 'settings.json',
+      relativePath: '.qwen/settings.json',
+      format: 'json',
+      description: 'Main Qwen Code settings — selected model, MCP servers, approval mode.',
+    },
+    {
+      id: 'env',
+      label: '.env',
+      relativePath: '.qwen/.env',
+      format: 'env',
+      description: 'Environment variables (DASHSCOPE_API_KEY, OPENAI_API_KEY for OpenAI-compatible routes, …).',
+    },
+  ],
+};
+
+export const SUPPORTED_CONFIG_PROVIDERS = Object.keys(PROVIDER_CONFIG_FILES);
+
+// Hard cap — no config file we care about is remotely this big, but we
+// want to refuse reads and writes that would swell memory. Editing a 1 MB
+// settings.json is already a smell.
+export const MAX_CONFIG_FILE_SIZE_BYTES = 1_048_576; // 1 MB