@pixelbyte-software/pixcode 1.33.11 → 1.35.0

package/server/modules/orchestration/workspace/workspace-manager.ts

@@ -0,0 +1,97 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+import { DockerWorkspace } from '@/modules/orchestration/workspace/docker-workspace.js';
+import { safeJoin } from '@/modules/orchestration/workspace/path-safety.js';
+import type {
+  ExecResult,
+  WorkspaceHandle,
+  WorkspaceKind,
+  WorkspaceRequest,
+} from '@/modules/orchestration/workspace/types.js';
+import { WorktreeWorkspace } from '@/modules/orchestration/workspace/worktree-workspace.js';
+
+class HostWorkspace implements WorkspaceHandle {
+  readonly kind = 'host' as const;
+  readonly id: string;
+  readonly path: string;
+  readonly baseRef: string;
+  readonly metadata: Record<string, unknown>;
+
+  constructor(request: WorkspaceRequest) {
+    this.id = `host_${request.taskId}`;
+    this.path = request.projectPath;
+    this.baseRef = request.baseRef ?? 'HEAD';
+    this.metadata = { ...request.metadata, keepAfterCompletion: true };
+  }
+
+  async exec(command: string, args: string[] = []): Promise<ExecResult> {
+    const { execFile } = await import('node:child_process');
+    const { promisify } = await import('node:util');
+    const execFileAsync = promisify(execFile);
+    try {
+      const { stdout, stderr } = await execFileAsync(command, args, {
+        cwd: this.path,
+        maxBuffer: 20 * 1024 * 1024,
+      });
+      return { stdout: String(stdout), stderr: String(stderr), exitCode: 0 };
+    } catch (error) {
+      const err = error as Error & { stdout?: string; stderr?: string; code?: number };
+      return {
+        stdout: String(err.stdout ?? ''),
+        stderr: String(err.stderr ?? err.message),
+        exitCode: typeof err.code === 'number' ? err.code : 1,
+      };
+    }
+  }
+
+  async readFile(relativePath: string): Promise<string> {
+    return fs.promises.readFile(safeJoin(this.path, relativePath), 'utf8');
+  }
+
+  async writeFile(relativePath: string, content: string): Promise<void> {
+    const target = safeJoin(this.path, relativePath);
+    await fs.promises.mkdir(path.dirname(target), { recursive: true });
+    await fs.promises.writeFile(target, content, 'utf8');
+  }
+
+  async diff(): Promise<string> {
+    const result = await this.exec('git', ['diff', `${this.baseRef}...HEAD`]);
+    return result.exitCode === 0 ? result.stdout : result.stderr || result.stdout;
+  }
+
+  destroy(): Promise<void> {
+    return Promise.resolve();
+  }
+}
+
+function readKind(value: unknown): WorkspaceKind {
+  return value === 'host' || value === 'docker' || value === 'worktree' ? value : 'worktree';
+}
+
+class WorkspaceManager {
+  async create(request: WorkspaceRequest): Promise<WorkspaceHandle> {
+    const kind = readKind(request.kind);
+    if (kind === 'host') {
+      return new HostWorkspace(request);
+    }
+    if (kind === 'docker') {
+      return new DockerWorkspace(request);
+    }
+    return WorktreeWorkspace.create(request);
+  }
+
+  recover(request: WorkspaceRequest): WorkspaceHandle {
+    return new HostWorkspace({
+      ...request,
+      kind: 'host',
+      metadata: {
+        ...request.metadata,
+        recovered: true,
+      },
+    });
+  }
+}
+
+export const workspaceManager = new WorkspaceManager();
+export type { WorkspaceManager };

package/server/modules/orchestration/workspace/worktree-workspace.ts

@@ -0,0 +1,125 @@
+import { execFile } from 'node:child_process';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { promisify } from 'node:util';
+
+import { assertSafeId, safeJoin, safeWorkspacePath } from '@/modules/orchestration/workspace/path-safety.js';
+import type {
+  ExecResult,
+  WorkspaceHandle,
+  WorkspaceRequest,
+} from '@/modules/orchestration/workspace/types.js';
+import { WorkspaceError } from '@/modules/orchestration/workspace/types.js';
+
+const execFileAsync = promisify(execFile);
+
+async function run(
+  command: string,
+  args: string[],
+  cwd: string,
+): Promise<ExecResult> {
+  try {
+    const { stdout, stderr } = await execFileAsync(command, args, {
+      cwd,
+      maxBuffer: 20 * 1024 * 1024,
+    });
+    return {
+      stdout: String(stdout),
+      stderr: String(stderr),
+      exitCode: 0,
+    };
+  } catch (error) {
+    const err = error as Error & {
+      stdout?: string | Buffer;
+      stderr?: string | Buffer;
+      code?: number;
+    };
+    return {
+      stdout: String(err.stdout ?? ''),
+      stderr: String(err.stderr ?? err.message),
+      exitCode: typeof err.code === 'number' ? err.code : 1,
+    };
+  }
+}
+
+export class WorktreeWorkspace implements WorkspaceHandle {
+  readonly kind = 'worktree' as const;
+  readonly id: string;
+  readonly path: string;
+  readonly baseRef: string;
+  readonly branchName: string;
+  readonly metadata: Record<string, unknown>;
+  private readonly projectPath: string;
+
+  private constructor(request: WorkspaceRequest, workspaceId: string, branchName: string) {
+    this.id = workspaceId;
+    this.path = safeWorkspacePath(workspaceId);
+    this.baseRef = request.baseRef ?? 'HEAD';
+    this.branchName = branchName;
+    this.projectPath = request.projectPath;
+    this.metadata = {
+      ...request.metadata,
+      keepAfterCompletion: request.keepAfterCompletion === true,
+    };
+  }
+
+  static async create(request: WorkspaceRequest): Promise<WorktreeWorkspace> {
+    assertSafeId(request.taskId, 'task id');
+    const workspaceId = `ws_${request.taskId}`;
+    const branchName = `pixcode/task_${request.taskId}`;
+    const workspace = new WorktreeWorkspace(request, workspaceId, branchName);
+
+    const existingBranch = await run('git', ['rev-parse', '--verify', branchName], request.projectPath);
+    if (existingBranch.exitCode === 0) {
+      throw new WorkspaceError('WORKSPACE_EXISTS', `Workspace branch already exists: ${branchName}`, {
+        branchName,
+      });
+    }
+
+    const result = await run(
+      'git',
+      ['worktree', 'add', workspace.path, '-b', branchName, workspace.baseRef],
+      request.projectPath,
+    );
+    if (result.exitCode !== 0) {
+      throw new WorkspaceError('WORKSPACE_CREATE_FAILED', result.stderr || result.stdout, {
+        stdout: result.stdout,
+        stderr: result.stderr,
+        baseRef: workspace.baseRef,
+      });
+    }
+
+    return workspace;
+  }
+
+  exec(command: string, args: string[] = []): Promise<ExecResult> {
+    return run(command, args, this.path);
+  }
+
+  async readFile(relativePath: string): Promise<string> {
+    return fs.readFile(safeJoin(this.path, relativePath), 'utf8');
+  }
+
+  async writeFile(relativePath: string, content: string): Promise<void> {
+    const target = safeJoin(this.path, relativePath);
+    await fs.mkdir(path.dirname(target), { recursive: true });
+    await fs.writeFile(target, content, 'utf8');
+  }
+
+  async diff(): Promise<string> {
+    const result = await run('git', ['diff', `${this.baseRef}...HEAD`], this.path);
+    if (result.exitCode !== 0) {
+      return result.stderr || result.stdout;
+    }
+    return result.stdout;
+  }
+
+  async destroy(): Promise<void> {
+    const result = await run('git', ['worktree', 'remove', '--force', this.path], this.projectPath);
+    if (result.exitCode !== 0) {
+      throw new WorkspaceError('WORKSPACE_DESTROY_FAILED', result.stderr || result.stdout, {
+        workspacePath: this.path,
+      });
+    }
+  }
+}

package/server/modules/providers/index.ts

@@ -0,0 +1,2 @@
+export { providerRegistry } from './provider.registry.js';
+export { CodexSessionsProvider } from './list/codex/codex-sessions.provider.js';

package/server/modules/providers/list/opencode/opencode-auth.provider.ts

@@ -1,130 +1,130 @@
-import { readFile } from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-
-import spawn from 'cross-spawn';
-
-import type { IProviderAuth } from '@/shared/interfaces.js';
-import type { ProviderAuthStatus } from '@/shared/types.js';
-import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
-// eslint-disable-next-line @typescript-eslint/ban-ts-comment
-// @ts-ignore — plain-JS module, typed via inference
-import { getProviderCredentials } from '@/services/provider-credentials.js';
-
-type OpencodeCredentialsStatus = {
-  authenticated: boolean;
-  email: string | null;
-  method: string | null;
-  error?: string;
-};
-
-/**
- * OpenCode auth checker.
- *
- * OpenCode stores credentials at `~/.local/share/opencode/auth.json` (XDG
- * data dir — different layout from the other providers which use
- * `~/.<name>/`). The file is a JSON map of `providerName → { type, ... }`
- * where type is `api` (API key), `oauth` (OAuth tokens), or similar.
- *
- * Windows layout (as of the 2026 release): `%LOCALAPPDATA%\opencode\auth.json`.
- *
- * Since OpenCode is multi-provider (OpenAI, Anthropic, Google, Ollama,
- * OpenCode Zen), "authenticated" here means "at least ONE provider in
- * auth.json has credentials" — we don't care which.
- */
-export class OpencodeProviderAuth implements IProviderAuth {
-  private checkInstalled(): boolean {
-    const cliPath = process.env.OPENCODE_CLI_PATH || 'opencode';
-    try {
-      const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
-      return !result.error && result.status === 0;
-    } catch {
-      return false;
-    }
-  }
-
-  async getStatus(): Promise<ProviderAuthStatus> {
-    const installed = this.checkInstalled();
-
-    if (!installed) {
-      return {
-        installed,
-        provider: 'opencode',
-        authenticated: false,
-        email: null,
-        method: null,
-        error: 'OpenCode CLI is not installed',
-      };
-    }
-
-    const credentials = await this.checkCredentials();
-
-    return {
-      installed,
-      provider: 'opencode',
-      authenticated: credentials.authenticated,
-      email: credentials.email,
-      method: credentials.method,
-      error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
-    };
-  }
-
-  private async checkCredentials(): Promise<OpencodeCredentialsStatus> {
-    // Pixcode-managed credentials come first — if the user stored an API
-    // key via Settings > Agents > API Key, trust that regardless of
-    // env vars or auth.json.
-    try {
-      const creds = await getProviderCredentials('opencode');
-      if (creds?.apiKey) {
-        return { authenticated: true, email: 'API Key Auth', method: 'pixcode_store' };
-      }
-    } catch { /* fall through */ }
-
-    // Env-var shortcut — any of the multi-provider keys OpenCode recognises.
-    const envKeys = ['ANTHROPIC_API_KEY', 'OPENAI_API_KEY', 'GOOGLE_API_KEY', 'OPENROUTER_API_KEY'];
-    for (const k of envKeys) {
-      if (process.env[k]?.trim()) {
-        return { authenticated: true, email: `${k.replace('_API_KEY', '')} env`, method: 'api_key' };
-      }
-    }
-
-    // auth.json — written by `opencode auth login`. On Windows the XDG
-    // data dir typically resolves to `%LOCALAPPDATA%\opencode`, but since
-    // Node's `os.homedir()` + `.local/share/opencode` covers the Linux
-    // default and most WSL cases, we check both paths.
-    const candidatePaths = [
-      path.join(os.homedir(), '.local', 'share', 'opencode', 'auth.json'),
-      path.join(os.homedir(), 'AppData', 'Local', 'opencode', 'auth.json'),
-    ];
-
-    for (const credsPath of candidatePaths) {
-      try {
-        const content = await readFile(credsPath, 'utf8');
-        const creds = readObjectRecord(JSON.parse(content)) ?? {};
-        const providerNames = Object.keys(creds);
-        if (providerNames.length > 0) {
-          // Prefer a real provider label over a generic one when we can
-          // identify it.
-          const firstProvider = providerNames[0];
-          const firstConfig = readObjectRecord(creds[firstProvider]) ?? {};
-          const authType = readOptionalString(firstConfig.type) ?? 'stored';
-          const label = providerNames.length === 1
-            ? `${firstProvider} (${authType})`
-            : `${providerNames.length} providers configured`;
-          return {
-            authenticated: true,
-            email: label,
-            method: authType === 'oauth' ? 'credentials_file' : 'api_key',
-          };
-        }
-      } catch { /* try next path */ }
-    }
-
-    return {
-      authenticated: false,
-      email: null,
-      method: null,
-      error: 'OpenCode is not configured — run `opencode auth login`.',
-    };
-  }
-}
+import { readFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+
+import spawn from 'cross-spawn';
+
+import type { IProviderAuth } from '@/shared/interfaces.js';
+import type { ProviderAuthStatus } from '@/shared/types.js';
+import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
+// eslint-disable-next-line @typescript-eslint/ban-ts-comment
+// @ts-ignore — plain-JS module, typed via inference
+import { getProviderCredentials } from '@/services/provider-credentials.js';
+
+type OpencodeCredentialsStatus = {
+  authenticated: boolean;
+  email: string | null;
+  method: string | null;
+  error?: string;
+};
+
+/**
+ * OpenCode auth checker.
+ *
+ * OpenCode stores credentials at `~/.local/share/opencode/auth.json` (XDG
+ * data dir — different layout from the other providers which use
+ * `~/.<name>/`). The file is a JSON map of `providerName → { type, ... }`
+ * where type is `api` (API key), `oauth` (OAuth tokens), or similar.
+ *
+ * Windows layout (as of the 2026 release): `%LOCALAPPDATA%\opencode\auth.json`.
+ *
+ * Since OpenCode is multi-provider (OpenAI, Anthropic, Google, Ollama,
+ * OpenCode Zen), "authenticated" here means "at least ONE provider in
+ * auth.json has credentials" — we don't care which.
+ */
+export class OpencodeProviderAuth implements IProviderAuth {
+  private checkInstalled(): boolean {
+    const cliPath = process.env.OPENCODE_CLI_PATH || 'opencode';
+    try {
+      const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
+      return !result.error && result.status === 0;
+    } catch {
+      return false;
+    }
+  }
+
+  async getStatus(): Promise<ProviderAuthStatus> {
+    const installed = this.checkInstalled();
+
+    if (!installed) {
+      return {
+        installed,
+        provider: 'opencode',
+        authenticated: false,
+        email: null,
+        method: null,
+        error: 'OpenCode CLI is not installed',
+      };
+    }
+
+    const credentials = await this.checkCredentials();
+
+    return {
+      installed,
+      provider: 'opencode',
+      authenticated: credentials.authenticated,
+      email: credentials.email,
+      method: credentials.method,
+      error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
+    };
+  }
+
+  private async checkCredentials(): Promise<OpencodeCredentialsStatus> {
+    // Pixcode-managed credentials come first — if the user stored an API
+    // key via Settings > Agents > API Key, trust that regardless of
+    // env vars or auth.json.
+    try {
+      const creds = await getProviderCredentials('opencode');
+      if (creds?.apiKey) {
+        return { authenticated: true, email: 'API Key Auth', method: 'pixcode_store' };
+      }
+    } catch { /* fall through */ }
+
+    // Env-var shortcut — any of the multi-provider keys OpenCode recognises.
+    const envKeys = ['ANTHROPIC_API_KEY', 'OPENAI_API_KEY', 'GOOGLE_API_KEY', 'OPENROUTER_API_KEY'];
+    for (const k of envKeys) {
+      if (process.env[k]?.trim()) {
+        return { authenticated: true, email: `${k.replace('_API_KEY', '')} env`, method: 'api_key' };
+      }
+    }
+
+    // auth.json — written by `opencode auth login`. On Windows the XDG
+    // data dir typically resolves to `%LOCALAPPDATA%\opencode`, but since
+    // Node's `os.homedir()` + `.local/share/opencode` covers the Linux
+    // default and most WSL cases, we check both paths.
+    const candidatePaths = [
+      path.join(os.homedir(), '.local', 'share', 'opencode', 'auth.json'),
+      path.join(os.homedir(), 'AppData', 'Local', 'opencode', 'auth.json'),
+    ];
+
+    for (const credsPath of candidatePaths) {
+      try {
+        const content = await readFile(credsPath, 'utf8');
+        const creds = readObjectRecord(JSON.parse(content)) ?? {};
+        const providerNames = Object.keys(creds);
+        if (providerNames.length > 0) {
+          // Prefer a real provider label over a generic one when we can
+          // identify it.
+          const firstProvider = providerNames[0];
+          const firstConfig = readObjectRecord(creds[firstProvider]) ?? {};
+          const authType = readOptionalString(firstConfig.type) ?? 'stored';
+          const label = providerNames.length === 1
+            ? `${firstProvider} (${authType})`
+            : `${providerNames.length} providers configured`;
+          return {
+            authenticated: true,
+            email: label,
+            method: authType === 'oauth' ? 'credentials_file' : 'api_key',
+          };
+        }
+      } catch { /* try next path */ }
+    }
+
+    return {
+      authenticated: false,
+      email: null,
+      method: null,
+      error: 'OpenCode is not configured — run `opencode auth login`.',
+    };
+  }
+}