@pixelbyte-software/pixcode 1.33.11 → 1.35.0

package/server/modules/providers/list/opencode/opencode-mcp.provider.ts

@@ -1,126 +1,126 @@
-import os from 'node:os';
-import path from 'node:path';
-
-import { McpProvider } from '@/modules/providers/shared/mcp/mcp.provider.js';
-import type { McpScope, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
-import {
-  AppError,
-  readJsonConfig,
-  readObjectRecord,
-  readOptionalString,
-  readStringArray,
-  readStringRecord,
-  writeJsonConfig,
-} from '@/shared/utils.js';
-
-/**
- * OpenCode MCP provider.
- *
- * OpenCode's MCP servers live under the top-level `mcp` key in
- * `opencode.json` (global at `~/.config/opencode/opencode.json`, project at
- * `<workspace>/opencode.json`). Each entry is either a local stdio command
- * (`{ command, args, env }`) or a remote server (`{ type: "remote", url,
- * headers, enabled }`). OpenCode's schema also supports an `enabled: false`
- * flag we preserve on write but don't surface in the UI yet.
- */
-export class OpencodeMcpProvider extends McpProvider {
-  constructor() {
-    super('opencode', ['user', 'project'], ['stdio', 'http', 'sse']);
-  }
-
-  protected async readScopedServers(scope: McpScope, workspacePath: string): Promise<Record<string, unknown>> {
-    const filePath = scope === 'user'
-      ? path.join(os.homedir(), '.config', 'opencode', 'opencode.json')
-      : path.join(workspacePath, 'opencode.json');
-    const config = await readJsonConfig(filePath);
-    return readObjectRecord(config.mcp) ?? {};
-  }
-
-  protected async writeScopedServers(
-    scope: McpScope,
-    workspacePath: string,
-    servers: Record<string, unknown>,
-  ): Promise<void> {
-    const filePath = scope === 'user'
-      ? path.join(os.homedir(), '.config', 'opencode', 'opencode.json')
-      : path.join(workspacePath, 'opencode.json');
-    const config = await readJsonConfig(filePath);
-    config.mcp = servers;
-    await writeJsonConfig(filePath, config);
-  }
-
-  protected buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown> {
-    if (input.transport === 'stdio') {
-      if (!input.command?.trim()) {
-        throw new AppError('command is required for stdio MCP servers.', {
-          code: 'MCP_COMMAND_REQUIRED',
-          statusCode: 400,
-        });
-      }
-      return {
-        type: 'local',
-        command: input.command,
-        args: input.args ?? [],
-        env: input.env ?? {},
-        cwd: input.cwd,
-        enabled: true,
-      };
-    }
-
-    if (!input.url?.trim()) {
-      throw new AppError('url is required for http/sse MCP servers.', {
-        code: 'MCP_URL_REQUIRED',
-        statusCode: 400,
-      });
-    }
-
-    return {
-      type: 'remote',
-      url: input.url,
-      headers: input.headers ?? {},
-      enabled: true,
-    };
-  }
-
-  protected normalizeServerConfig(
-    scope: McpScope,
-    name: string,
-    rawConfig: unknown,
-  ): ProviderMcpServer | null {
-    if (!rawConfig || typeof rawConfig !== 'object') {
-      return null;
-    }
-
-    const config = rawConfig as Record<string, unknown>;
-    const opencodeType = readOptionalString(config.type);
-
-    // Local (stdio) entries — either type: "local" explicitly or any entry
-    // with a command field (pre-type schemas).
-    if (opencodeType === 'local' || typeof config.command === 'string') {
-      return {
-        provider: 'opencode',
-        name,
-        scope,
-        transport: 'stdio',
-        command: typeof config.command === 'string' ? config.command : '',
-        args: readStringArray(config.args),
-        env: readStringRecord(config.env),
-        cwd: readOptionalString(config.cwd),
-      };
-    }
-
-    // Remote entries — type: "remote" or any entry with a url field.
-    if (opencodeType === 'remote' || typeof config.url === 'string') {
-      return {
-        provider: 'opencode',
-        name,
-        scope,
-        transport: 'http',
-        url: typeof config.url === 'string' ? config.url : '',
-        headers: readStringRecord(config.headers),
-      };
-    }
-
-    return null;
-  }
-}
+import os from 'node:os';
+import path from 'node:path';
+
+import { McpProvider } from '@/modules/providers/shared/mcp/mcp.provider.js';
+import type { McpScope, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
+import {
+  AppError,
+  readJsonConfig,
+  readObjectRecord,
+  readOptionalString,
+  readStringArray,
+  readStringRecord,
+  writeJsonConfig,
+} from '@/shared/utils.js';
+
+/**
+ * OpenCode MCP provider.
+ *
+ * OpenCode's MCP servers live under the top-level `mcp` key in
+ * `opencode.json` (global at `~/.config/opencode/opencode.json`, project at
+ * `<workspace>/opencode.json`). Each entry is either a local stdio command
+ * (`{ command, args, env }`) or a remote server (`{ type: "remote", url,
+ * headers, enabled }`). OpenCode's schema also supports an `enabled: false`
+ * flag we preserve on write but don't surface in the UI yet.
+ */
+export class OpencodeMcpProvider extends McpProvider {
+  constructor() {
+    super('opencode', ['user', 'project'], ['stdio', 'http', 'sse']);
+  }
+
+  protected async readScopedServers(scope: McpScope, workspacePath: string): Promise<Record<string, unknown>> {
+    const filePath = scope === 'user'
+      ? path.join(os.homedir(), '.config', 'opencode', 'opencode.json')
+      : path.join(workspacePath, 'opencode.json');
+    const config = await readJsonConfig(filePath);
+    return readObjectRecord(config.mcp) ?? {};
+  }
+
+  protected async writeScopedServers(
+    scope: McpScope,
+    workspacePath: string,
+    servers: Record<string, unknown>,
+  ): Promise<void> {
+    const filePath = scope === 'user'
+      ? path.join(os.homedir(), '.config', 'opencode', 'opencode.json')
+      : path.join(workspacePath, 'opencode.json');
+    const config = await readJsonConfig(filePath);
+    config.mcp = servers;
+    await writeJsonConfig(filePath, config);
+  }
+
+  protected buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown> {
+    if (input.transport === 'stdio') {
+      if (!input.command?.trim()) {
+        throw new AppError('command is required for stdio MCP servers.', {
+          code: 'MCP_COMMAND_REQUIRED',
+          statusCode: 400,
+        });
+      }
+      return {
+        type: 'local',
+        command: input.command,
+        args: input.args ?? [],
+        env: input.env ?? {},
+        cwd: input.cwd,
+        enabled: true,
+      };
+    }
+
+    if (!input.url?.trim()) {
+      throw new AppError('url is required for http/sse MCP servers.', {
+        code: 'MCP_URL_REQUIRED',
+        statusCode: 400,
+      });
+    }
+
+    return {
+      type: 'remote',
+      url: input.url,
+      headers: input.headers ?? {},
+      enabled: true,
+    };
+  }
+
+  protected normalizeServerConfig(
+    scope: McpScope,
+    name: string,
+    rawConfig: unknown,
+  ): ProviderMcpServer | null {
+    if (!rawConfig || typeof rawConfig !== 'object') {
+      return null;
+    }
+
+    const config = rawConfig as Record<string, unknown>;
+    const opencodeType = readOptionalString(config.type);
+
+    // Local (stdio) entries — either type: "local" explicitly or any entry
+    // with a command field (pre-type schemas).
+    if (opencodeType === 'local' || typeof config.command === 'string') {
+      return {
+        provider: 'opencode',
+        name,
+        scope,
+        transport: 'stdio',
+        command: typeof config.command === 'string' ? config.command : '',
+        args: readStringArray(config.args),
+        env: readStringRecord(config.env),
+        cwd: readOptionalString(config.cwd),
+      };
+    }
+
+    // Remote entries — type: "remote" or any entry with a url field.
+    if (opencodeType === 'remote' || typeof config.url === 'string') {
+      return {
+        provider: 'opencode',
+        name,
+        scope,
+        transport: 'http',
+        url: typeof config.url === 'string' ? config.url : '',
+        headers: readStringRecord(config.headers),
+      };
+    }
+
+    return null;
+  }
+}

package/server/modules/providers/list/opencode/opencode.provider.ts

@@ -1,29 +1,29 @@
-import { AbstractProvider } from '@/modules/providers/shared/base/abstract.provider.js';
-import { OpencodeProviderAuth } from '@/modules/providers/list/opencode/opencode-auth.provider.js';
-import { OpencodeMcpProvider } from '@/modules/providers/list/opencode/opencode-mcp.provider.js';
-import { OpencodeSessionsProvider } from '@/modules/providers/list/opencode/opencode-sessions.provider.js';
-import type { IProviderAuth, IProviderSessions } from '@/shared/interfaces.js';
-
-/**
- * OpenCode provider.
- *
- * OpenCode (npm package: `opencode-ai`, binary: `opencode`) is a
- * multi-provider terminal coding agent. Unlike Claude/Codex/Gemini/Qwen
- * it uses XDG paths:
- *   - config: `~/.config/opencode/opencode.json`
- *   - data:   `~/.local/share/opencode/` (auth.json, sessions, logs)
- *
- * Its permission system is granular (per-tool + per-pattern) rather than
- * the 2/3-mode toggle other CLIs expose. We surface that through the
- * Configuration tab and the opencode.json editor — the Permissions tab
- * exposes high-level presets only.
- */
-export class OpencodeProvider extends AbstractProvider {
-  readonly mcp = new OpencodeMcpProvider();
-  readonly auth: IProviderAuth = new OpencodeProviderAuth();
-  readonly sessions: IProviderSessions = new OpencodeSessionsProvider();
-
-  constructor() {
-    super('opencode');
-  }
-}
+import { AbstractProvider } from '@/modules/providers/shared/base/abstract.provider.js';
+import { OpencodeProviderAuth } from '@/modules/providers/list/opencode/opencode-auth.provider.js';
+import { OpencodeMcpProvider } from '@/modules/providers/list/opencode/opencode-mcp.provider.js';
+import { OpencodeSessionsProvider } from '@/modules/providers/list/opencode/opencode-sessions.provider.js';
+import type { IProviderAuth, IProviderSessions } from '@/shared/interfaces.js';
+
+/**
+ * OpenCode provider.
+ *
+ * OpenCode (npm package: `opencode-ai`, binary: `opencode`) is a
+ * multi-provider terminal coding agent. Unlike Claude/Codex/Gemini/Qwen
+ * it uses XDG paths:
+ *   - config: `~/.config/opencode/opencode.json`
+ *   - data:   `~/.local/share/opencode/` (auth.json, sessions, logs)
+ *
+ * Its permission system is granular (per-tool + per-pattern) rather than
+ * the 2/3-mode toggle other CLIs expose. We surface that through the
+ * Configuration tab and the opencode.json editor — the Permissions tab
+ * exposes high-level presets only.
+ */
+export class OpencodeProvider extends AbstractProvider {
+  readonly mcp = new OpencodeMcpProvider();
+  readonly auth: IProviderAuth = new OpencodeProviderAuth();
+  readonly sessions: IProviderSessions = new OpencodeSessionsProvider();
+
+  constructor() {
+    super('opencode');
+  }
+}

package/server/modules/providers/list/qwen/qwen-auth.provider.ts

@@ -1,145 +1,145 @@
-import { readFile } from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-
-import spawn from 'cross-spawn';
-
-import type { IProviderAuth } from '@/shared/interfaces.js';
-import type { ProviderAuthStatus } from '@/shared/types.js';
-import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
-// eslint-disable-next-line @typescript-eslint/ban-ts-comment
-// @ts-ignore — plain-JS module, typed via inference
-import { getProviderCredentials } from '@/services/provider-credentials.js';
-
-type QwenCredentialsStatus = {
-  authenticated: boolean;
-  email: string | null;
-  method: string | null;
-  error?: string;
-};
-
-/**
- * Qwen Code auth checker.
- *
- * Qwen supports three credential surfaces — in priority order:
- *   1. `QWEN_API_KEY` env var (classic API key)
- *   2. `OPENAI_API_KEY` + `OPENAI_BASE_URL` env vars (OpenAI-compatible BYOK
- *      — what the docs recommend for ModelScope, OpenRouter, and self-hosted)
- *   3. Local OAuth tokens at `~/.qwen/oauth_creds.json` (Qwen OAuth /
- *      Alibaba Cloud Coding Plan cached credentials)
- *   4. `~/.qwen/settings.json` with an embedded `auth.method` + API key
- */
-export class QwenProviderAuth implements IProviderAuth {
-  private checkInstalled(): boolean {
-    const cliPath = process.env.QWEN_PATH || 'qwen';
-    try {
-      const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
-      return !result.error && result.status === 0;
-    } catch {
-      return false;
-    }
-  }
-
-  async getStatus(): Promise<ProviderAuthStatus> {
-    const installed = this.checkInstalled();
-
-    if (!installed) {
-      return {
-        installed,
-        provider: 'qwen',
-        authenticated: false,
-        email: null,
-        method: null,
-        error: 'Qwen Code CLI is not installed',
-      };
-    }
-
-    const credentials = await this.checkCredentials();
-
-    return {
-      installed,
-      provider: 'qwen',
-      authenticated: credentials.authenticated,
-      email: credentials.email,
-      method: credentials.method,
-      error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
-    };
-  }
-
-  private async checkCredentials(): Promise<QwenCredentialsStatus> {
-    // Pixcode-managed credentials come first. If the user saved an API key
-    // through our Settings > Agents > API Key form, we trust that no
-    // matter what the environment or ~/.qwen/* files say. Base URL is
-    // optional — some users point at Alibaba's default endpoint.
-    try {
-      const creds = await getProviderCredentials('qwen');
-      if (creds?.apiKey) {
-        const label = creds.baseUrl
-          ? `API Key · ${(() => { try { return new URL(creds.baseUrl).host; } catch { return creds.baseUrl; } })()}`
-          : 'API Key Auth';
-        return { authenticated: true, email: label, method: 'pixcode_store' };
-      }
-    } catch { /* fall through */ }
-
-    if (process.env.QWEN_API_KEY?.trim()) {
-      return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
-    }
-    // Loosened: base URL is optional. Qwen Code also works with the default
-    // Alibaba endpoint baked into the CLI. Previously required both env vars
-    // and silently failed when the user only pasted an API key.
-    if (process.env.OPENAI_API_KEY?.trim()) {
-      return { authenticated: true, email: 'OpenAI-Compatible Auth', method: 'api_key' };
-    }
-
-    // OAuth credentials file — written by `/auth` interactive flow.
-    try {
-      const credsPath = path.join(os.homedir(), '.qwen', 'oauth_creds.json');
-      const content = await readFile(credsPath, 'utf8');
-      const creds = readObjectRecord(JSON.parse(content)) ?? {};
-      const accessToken = readOptionalString(creds.access_token);
-      if (accessToken) {
-        const email = readOptionalString(creds.email)
-          ?? readOptionalString(creds.user_email)
-          ?? 'OAuth Session';
-        return { authenticated: true, email, method: 'credentials_file' };
-      }
-    } catch { /* fall through to settings.json */ }
-
-    // settings.json — the API-key / OpenAI-compat authoring path.
-    try {
-      const settingsPath = path.join(os.homedir(), '.qwen', 'settings.json');
-      const content = await readFile(settingsPath, 'utf8');
-      const settings = readObjectRecord(JSON.parse(content)) ?? {};
-      const auth = readObjectRecord(settings.auth) ?? {};
-      const method = readOptionalString(auth.method) ?? readOptionalString(settings.authMethod);
-      const apiKey = readOptionalString(auth.apiKey) ?? readOptionalString(settings.apiKey);
-
-      if (apiKey) {
-        return {
-          authenticated: true,
-          email: method ? `${method} (settings.json)` : 'API Key Auth',
-          method: 'settings_file',
-        };
-      }
-
-      if (method && method.toLowerCase().includes('oauth')) {
-        // Settings file says OAuth is configured but the creds file isn't
-        // readable — treat as a soft "not authenticated yet" rather than an
-        // install error, because the browser flow may be mid-flight.
-        return {
-          authenticated: false,
-          email: null,
-          method: 'credentials_file',
-          error: 'OAuth not yet complete — run `qwen` and finish `/auth`.',
-        };
-      }
-    } catch { /* no settings yet */ }
-
-    return {
-      authenticated: false,
-      email: null,
-      method: null,
-      error: 'Qwen Code is not configured',
-    };
-  }
-}
+import { readFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+
+import spawn from 'cross-spawn';
+
+import type { IProviderAuth } from '@/shared/interfaces.js';
+import type { ProviderAuthStatus } from '@/shared/types.js';
+import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
+// eslint-disable-next-line @typescript-eslint/ban-ts-comment
+// @ts-ignore — plain-JS module, typed via inference
+import { getProviderCredentials } from '@/services/provider-credentials.js';
+
+type QwenCredentialsStatus = {
+  authenticated: boolean;
+  email: string | null;
+  method: string | null;
+  error?: string;
+};
+
+/**
+ * Qwen Code auth checker.
+ *
+ * Qwen supports three credential surfaces — in priority order:
+ *   1. `QWEN_API_KEY` env var (classic API key)
+ *   2. `OPENAI_API_KEY` + `OPENAI_BASE_URL` env vars (OpenAI-compatible BYOK
+ *      — what the docs recommend for ModelScope, OpenRouter, and self-hosted)
+ *   3. Local OAuth tokens at `~/.qwen/oauth_creds.json` (Qwen OAuth /
+ *      Alibaba Cloud Coding Plan cached credentials)
+ *   4. `~/.qwen/settings.json` with an embedded `auth.method` + API key
+ */
+export class QwenProviderAuth implements IProviderAuth {
+  private checkInstalled(): boolean {
+    const cliPath = process.env.QWEN_PATH || 'qwen';
+    try {
+      const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
+      return !result.error && result.status === 0;
+    } catch {
+      return false;
+    }
+  }
+
+  async getStatus(): Promise<ProviderAuthStatus> {
+    const installed = this.checkInstalled();
+
+    if (!installed) {
+      return {
+        installed,
+        provider: 'qwen',
+        authenticated: false,
+        email: null,
+        method: null,
+        error: 'Qwen Code CLI is not installed',
+      };
+    }
+
+    const credentials = await this.checkCredentials();
+
+    return {
+      installed,
+      provider: 'qwen',
+      authenticated: credentials.authenticated,
+      email: credentials.email,
+      method: credentials.method,
+      error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
+    };
+  }
+
+  private async checkCredentials(): Promise<QwenCredentialsStatus> {
+    // Pixcode-managed credentials come first. If the user saved an API key
+    // through our Settings > Agents > API Key form, we trust that no
+    // matter what the environment or ~/.qwen/* files say. Base URL is
+    // optional — some users point at Alibaba's default endpoint.
+    try {
+      const creds = await getProviderCredentials('qwen');
+      if (creds?.apiKey) {
+        const label = creds.baseUrl
+          ? `API Key · ${(() => { try { return new URL(creds.baseUrl).host; } catch { return creds.baseUrl; } })()}`
+          : 'API Key Auth';
+        return { authenticated: true, email: label, method: 'pixcode_store' };
+      }
+    } catch { /* fall through */ }
+
+    if (process.env.QWEN_API_KEY?.trim()) {
+      return { authenticated: true, email: 'API Key Auth', method: 'api_key' };
+    }
+    // Loosened: base URL is optional. Qwen Code also works with the default
+    // Alibaba endpoint baked into the CLI. Previously required both env vars
+    // and silently failed when the user only pasted an API key.
+    if (process.env.OPENAI_API_KEY?.trim()) {
+      return { authenticated: true, email: 'OpenAI-Compatible Auth', method: 'api_key' };
+    }
+
+    // OAuth credentials file — written by `/auth` interactive flow.
+    try {
+      const credsPath = path.join(os.homedir(), '.qwen', 'oauth_creds.json');
+      const content = await readFile(credsPath, 'utf8');
+      const creds = readObjectRecord(JSON.parse(content)) ?? {};
+      const accessToken = readOptionalString(creds.access_token);
+      if (accessToken) {
+        const email = readOptionalString(creds.email)
+          ?? readOptionalString(creds.user_email)
+          ?? 'OAuth Session';
+        return { authenticated: true, email, method: 'credentials_file' };
+      }
+    } catch { /* fall through to settings.json */ }
+
+    // settings.json — the API-key / OpenAI-compat authoring path.
+    try {
+      const settingsPath = path.join(os.homedir(), '.qwen', 'settings.json');
+      const content = await readFile(settingsPath, 'utf8');
+      const settings = readObjectRecord(JSON.parse(content)) ?? {};
+      const auth = readObjectRecord(settings.auth) ?? {};
+      const method = readOptionalString(auth.method) ?? readOptionalString(settings.authMethod);
+      const apiKey = readOptionalString(auth.apiKey) ?? readOptionalString(settings.apiKey);
+
+      if (apiKey) {
+        return {
+          authenticated: true,
+          email: method ? `${method} (settings.json)` : 'API Key Auth',
+          method: 'settings_file',
+        };
+      }
+
+      if (method && method.toLowerCase().includes('oauth')) {
+        // Settings file says OAuth is configured but the creds file isn't
+        // readable — treat as a soft "not authenticated yet" rather than an
+        // install error, because the browser flow may be mid-flight.
+        return {
+          authenticated: false,
+          email: null,
+          method: 'credentials_file',
+          error: 'OAuth not yet complete — run `qwen` and finish `/auth`.',
+        };
+      }
+    } catch { /* no settings yet */ }
+
+    return {
+      authenticated: false,
+      email: null,
+      method: null,
+      error: 'Qwen Code is not configured',
+    };
+  }
+}