@pixelbyte-software/pixcode 1.33.8 → 1.33.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (67) hide show
  1. package/dist/api-docs.html +395 -879
  2. package/dist/assets/{index-JU38YIxa.js → index-B_dU5AHA.js} +153 -165
  3. package/dist/favicon.svg +8 -8
  4. package/dist/icons/icon-128x128.svg +9 -9
  5. package/dist/icons/icon-144x144.svg +9 -9
  6. package/dist/icons/icon-152x152.svg +9 -9
  7. package/dist/icons/icon-192x192.svg +9 -9
  8. package/dist/icons/icon-384x384.svg +9 -9
  9. package/dist/icons/icon-512x512.svg +9 -9
  10. package/dist/icons/icon-72x72.svg +9 -9
  11. package/dist/icons/icon-96x96.svg +9 -9
  12. package/dist/icons/icon-template.svg +9 -9
  13. package/dist/index.html +1 -1
  14. package/dist/logo.svg +12 -12
  15. package/dist/openapi.yaml +1311 -0
  16. package/dist-server/server/gemini-cli.js +59 -0
  17. package/dist-server/server/gemini-cli.js.map +1 -1
  18. package/dist-server/server/index.js +6 -1
  19. package/dist-server/server/index.js.map +1 -1
  20. package/dist-server/server/middleware/auth.js +51 -9
  21. package/dist-server/server/middleware/auth.js.map +1 -1
  22. package/dist-server/server/modules/providers/list/opencode/opencode-sessions.provider.js +54 -15
  23. package/dist-server/server/modules/providers/list/opencode/opencode-sessions.provider.js.map +1 -1
  24. package/dist-server/server/modules/providers/list/qwen/qwen-sessions.provider.js +46 -0
  25. package/dist-server/server/modules/providers/list/qwen/qwen-sessions.provider.js.map +1 -1
  26. package/dist-server/server/modules/providers/provider.routes.js +32 -1
  27. package/dist-server/server/modules/providers/provider.routes.js.map +1 -1
  28. package/dist-server/server/opencode-cli.js +37 -1
  29. package/dist-server/server/opencode-cli.js.map +1 -1
  30. package/dist-server/server/opencode-response-handler.js +36 -34
  31. package/dist-server/server/opencode-response-handler.js.map +1 -1
  32. package/dist-server/server/routes/agent.js +187 -56
  33. package/dist-server/server/routes/agent.js.map +1 -1
  34. package/dist-server/server/routes/projects.js +134 -8
  35. package/dist-server/server/routes/projects.js.map +1 -1
  36. package/dist-server/server/services/provider-credentials.js +42 -8
  37. package/dist-server/server/services/provider-credentials.js.map +1 -1
  38. package/package.json +178 -178
  39. package/scripts/rest-sweep.mjs +93 -0
  40. package/server/database/db.js +794 -794
  41. package/server/database/json-store.js +194 -194
  42. package/server/gemini-cli.js +60 -0
  43. package/server/index.js +6 -1
  44. package/server/middleware/auth.js +50 -9
  45. package/server/modules/providers/list/opencode/opencode-auth.provider.ts +130 -130
  46. package/server/modules/providers/list/opencode/opencode-mcp.provider.ts +126 -126
  47. package/server/modules/providers/list/opencode/opencode-sessions.provider.ts +232 -193
  48. package/server/modules/providers/list/opencode/opencode.provider.ts +29 -29
  49. package/server/modules/providers/list/qwen/qwen-auth.provider.ts +145 -145
  50. package/server/modules/providers/list/qwen/qwen-mcp.provider.ts +114 -114
  51. package/server/modules/providers/list/qwen/qwen-sessions.provider.ts +265 -218
  52. package/server/modules/providers/list/qwen/qwen.provider.ts +21 -21
  53. package/server/modules/providers/provider.routes.ts +37 -4
  54. package/server/modules/providers/shared/provider-configs.ts +142 -142
  55. package/server/opencode-cli.js +37 -1
  56. package/server/opencode-response-handler.js +107 -100
  57. package/server/qwen-code-cli.js +395 -395
  58. package/server/qwen-response-handler.js +73 -73
  59. package/server/routes/agent.js +178 -58
  60. package/server/routes/projects.js +136 -8
  61. package/server/routes/qwen.js +27 -27
  62. package/server/services/external-access.js +171 -171
  63. package/server/services/provider-credentials.js +189 -155
  64. package/server/services/provider-models.js +381 -381
  65. package/server/services/telegram/telegram-http-client.js +130 -130
  66. package/server/services/vapid-keys.js +36 -36
  67. package/server/utils/port-access.js +209 -209
@@ -1,130 +1,130 @@
1
- import { readFile } from 'node:fs/promises';
2
- import os from 'node:os';
3
- import path from 'node:path';
4
-
5
- import spawn from 'cross-spawn';
6
-
7
- import type { IProviderAuth } from '@/shared/interfaces.js';
8
- import type { ProviderAuthStatus } from '@/shared/types.js';
9
- import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
10
- // eslint-disable-next-line @typescript-eslint/ban-ts-comment
11
- // @ts-ignore — plain-JS module, typed via inference
12
- import { getProviderCredentials } from '@/services/provider-credentials.js';
13
-
14
- type OpencodeCredentialsStatus = {
15
- authenticated: boolean;
16
- email: string | null;
17
- method: string | null;
18
- error?: string;
19
- };
20
-
21
- /**
22
- * OpenCode auth checker.
23
- *
24
- * OpenCode stores credentials at `~/.local/share/opencode/auth.json` (XDG
25
- * data dir — different layout from the other providers which use
26
- * `~/.<name>/`). The file is a JSON map of `providerName → { type, ... }`
27
- * where type is `api` (API key), `oauth` (OAuth tokens), or similar.
28
- *
29
- * Windows layout (as of the 2026 release): `%LOCALAPPDATA%\opencode\auth.json`.
30
- *
31
- * Since OpenCode is multi-provider (OpenAI, Anthropic, Google, Ollama,
32
- * OpenCode Zen), "authenticated" here means "at least ONE provider in
33
- * auth.json has credentials" — we don't care which.
34
- */
35
- export class OpencodeProviderAuth implements IProviderAuth {
36
- private checkInstalled(): boolean {
37
- const cliPath = process.env.OPENCODE_CLI_PATH || 'opencode';
38
- try {
39
- const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
40
- return !result.error && result.status === 0;
41
- } catch {
42
- return false;
43
- }
44
- }
45
-
46
- async getStatus(): Promise<ProviderAuthStatus> {
47
- const installed = this.checkInstalled();
48
-
49
- if (!installed) {
50
- return {
51
- installed,
52
- provider: 'opencode',
53
- authenticated: false,
54
- email: null,
55
- method: null,
56
- error: 'OpenCode CLI is not installed',
57
- };
58
- }
59
-
60
- const credentials = await this.checkCredentials();
61
-
62
- return {
63
- installed,
64
- provider: 'opencode',
65
- authenticated: credentials.authenticated,
66
- email: credentials.email,
67
- method: credentials.method,
68
- error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
69
- };
70
- }
71
-
72
- private async checkCredentials(): Promise<OpencodeCredentialsStatus> {
73
- // Pixcode-managed credentials come first — if the user stored an API
74
- // key via Settings > Agents > API Key, trust that regardless of
75
- // env vars or auth.json.
76
- try {
77
- const creds = await getProviderCredentials('opencode');
78
- if (creds?.apiKey) {
79
- return { authenticated: true, email: 'API Key Auth', method: 'pixcode_store' };
80
- }
81
- } catch { /* fall through */ }
82
-
83
- // Env-var shortcut — any of the multi-provider keys OpenCode recognises.
84
- const envKeys = ['ANTHROPIC_API_KEY', 'OPENAI_API_KEY', 'GOOGLE_API_KEY', 'OPENROUTER_API_KEY'];
85
- for (const k of envKeys) {
86
- if (process.env[k]?.trim()) {
87
- return { authenticated: true, email: `${k.replace('_API_KEY', '')} env`, method: 'api_key' };
88
- }
89
- }
90
-
91
- // auth.json — written by `opencode auth login`. On Windows the XDG
92
- // data dir typically resolves to `%LOCALAPPDATA%\opencode`, but since
93
- // Node's `os.homedir()` + `.local/share/opencode` covers the Linux
94
- // default and most WSL cases, we check both paths.
95
- const candidatePaths = [
96
- path.join(os.homedir(), '.local', 'share', 'opencode', 'auth.json'),
97
- path.join(os.homedir(), 'AppData', 'Local', 'opencode', 'auth.json'),
98
- ];
99
-
100
- for (const credsPath of candidatePaths) {
101
- try {
102
- const content = await readFile(credsPath, 'utf8');
103
- const creds = readObjectRecord(JSON.parse(content)) ?? {};
104
- const providerNames = Object.keys(creds);
105
- if (providerNames.length > 0) {
106
- // Prefer a real provider label over a generic one when we can
107
- // identify it.
108
- const firstProvider = providerNames[0];
109
- const firstConfig = readObjectRecord(creds[firstProvider]) ?? {};
110
- const authType = readOptionalString(firstConfig.type) ?? 'stored';
111
- const label = providerNames.length === 1
112
- ? `${firstProvider} (${authType})`
113
- : `${providerNames.length} providers configured`;
114
- return {
115
- authenticated: true,
116
- email: label,
117
- method: authType === 'oauth' ? 'credentials_file' : 'api_key',
118
- };
119
- }
120
- } catch { /* try next path */ }
121
- }
122
-
123
- return {
124
- authenticated: false,
125
- email: null,
126
- method: null,
127
- error: 'OpenCode is not configured — run `opencode auth login`.',
128
- };
129
- }
130
- }
1
+ import { readFile } from 'node:fs/promises';
2
+ import os from 'node:os';
3
+ import path from 'node:path';
4
+
5
+ import spawn from 'cross-spawn';
6
+
7
+ import type { IProviderAuth } from '@/shared/interfaces.js';
8
+ import type { ProviderAuthStatus } from '@/shared/types.js';
9
+ import { readObjectRecord, readOptionalString } from '@/shared/utils.js';
10
+ // eslint-disable-next-line @typescript-eslint/ban-ts-comment
11
+ // @ts-ignore — plain-JS module, typed via inference
12
+ import { getProviderCredentials } from '@/services/provider-credentials.js';
13
+
14
+ type OpencodeCredentialsStatus = {
15
+ authenticated: boolean;
16
+ email: string | null;
17
+ method: string | null;
18
+ error?: string;
19
+ };
20
+
21
+ /**
22
+ * OpenCode auth checker.
23
+ *
24
+ * OpenCode stores credentials at `~/.local/share/opencode/auth.json` (XDG
25
+ * data dir — different layout from the other providers which use
26
+ * `~/.<name>/`). The file is a JSON map of `providerName → { type, ... }`
27
+ * where type is `api` (API key), `oauth` (OAuth tokens), or similar.
28
+ *
29
+ * Windows layout (as of the 2026 release): `%LOCALAPPDATA%\opencode\auth.json`.
30
+ *
31
+ * Since OpenCode is multi-provider (OpenAI, Anthropic, Google, Ollama,
32
+ * OpenCode Zen), "authenticated" here means "at least ONE provider in
33
+ * auth.json has credentials" — we don't care which.
34
+ */
35
+ export class OpencodeProviderAuth implements IProviderAuth {
36
+ private checkInstalled(): boolean {
37
+ const cliPath = process.env.OPENCODE_CLI_PATH || 'opencode';
38
+ try {
39
+ const result = spawn.sync(cliPath, ['--version'], { stdio: 'ignore', timeout: 5000 });
40
+ return !result.error && result.status === 0;
41
+ } catch {
42
+ return false;
43
+ }
44
+ }
45
+
46
+ async getStatus(): Promise<ProviderAuthStatus> {
47
+ const installed = this.checkInstalled();
48
+
49
+ if (!installed) {
50
+ return {
51
+ installed,
52
+ provider: 'opencode',
53
+ authenticated: false,
54
+ email: null,
55
+ method: null,
56
+ error: 'OpenCode CLI is not installed',
57
+ };
58
+ }
59
+
60
+ const credentials = await this.checkCredentials();
61
+
62
+ return {
63
+ installed,
64
+ provider: 'opencode',
65
+ authenticated: credentials.authenticated,
66
+ email: credentials.email,
67
+ method: credentials.method,
68
+ error: credentials.authenticated ? undefined : credentials.error || 'Not authenticated',
69
+ };
70
+ }
71
+
72
+ private async checkCredentials(): Promise<OpencodeCredentialsStatus> {
73
+ // Pixcode-managed credentials come first — if the user stored an API
74
+ // key via Settings > Agents > API Key, trust that regardless of
75
+ // env vars or auth.json.
76
+ try {
77
+ const creds = await getProviderCredentials('opencode');
78
+ if (creds?.apiKey) {
79
+ return { authenticated: true, email: 'API Key Auth', method: 'pixcode_store' };
80
+ }
81
+ } catch { /* fall through */ }
82
+
83
+ // Env-var shortcut — any of the multi-provider keys OpenCode recognises.
84
+ const envKeys = ['ANTHROPIC_API_KEY', 'OPENAI_API_KEY', 'GOOGLE_API_KEY', 'OPENROUTER_API_KEY'];
85
+ for (const k of envKeys) {
86
+ if (process.env[k]?.trim()) {
87
+ return { authenticated: true, email: `${k.replace('_API_KEY', '')} env`, method: 'api_key' };
88
+ }
89
+ }
90
+
91
+ // auth.json — written by `opencode auth login`. On Windows the XDG
92
+ // data dir typically resolves to `%LOCALAPPDATA%\opencode`, but since
93
+ // Node's `os.homedir()` + `.local/share/opencode` covers the Linux
94
+ // default and most WSL cases, we check both paths.
95
+ const candidatePaths = [
96
+ path.join(os.homedir(), '.local', 'share', 'opencode', 'auth.json'),
97
+ path.join(os.homedir(), 'AppData', 'Local', 'opencode', 'auth.json'),
98
+ ];
99
+
100
+ for (const credsPath of candidatePaths) {
101
+ try {
102
+ const content = await readFile(credsPath, 'utf8');
103
+ const creds = readObjectRecord(JSON.parse(content)) ?? {};
104
+ const providerNames = Object.keys(creds);
105
+ if (providerNames.length > 0) {
106
+ // Prefer a real provider label over a generic one when we can
107
+ // identify it.
108
+ const firstProvider = providerNames[0];
109
+ const firstConfig = readObjectRecord(creds[firstProvider]) ?? {};
110
+ const authType = readOptionalString(firstConfig.type) ?? 'stored';
111
+ const label = providerNames.length === 1
112
+ ? `${firstProvider} (${authType})`
113
+ : `${providerNames.length} providers configured`;
114
+ return {
115
+ authenticated: true,
116
+ email: label,
117
+ method: authType === 'oauth' ? 'credentials_file' : 'api_key',
118
+ };
119
+ }
120
+ } catch { /* try next path */ }
121
+ }
122
+
123
+ return {
124
+ authenticated: false,
125
+ email: null,
126
+ method: null,
127
+ error: 'OpenCode is not configured — run `opencode auth login`.',
128
+ };
129
+ }
130
+ }
@@ -1,126 +1,126 @@
1
- import os from 'node:os';
2
- import path from 'node:path';
3
-
4
- import { McpProvider } from '@/modules/providers/shared/mcp/mcp.provider.js';
5
- import type { McpScope, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
6
- import {
7
- AppError,
8
- readJsonConfig,
9
- readObjectRecord,
10
- readOptionalString,
11
- readStringArray,
12
- readStringRecord,
13
- writeJsonConfig,
14
- } from '@/shared/utils.js';
15
-
16
- /**
17
- * OpenCode MCP provider.
18
- *
19
- * OpenCode's MCP servers live under the top-level `mcp` key in
20
- * `opencode.json` (global at `~/.config/opencode/opencode.json`, project at
21
- * `<workspace>/opencode.json`). Each entry is either a local stdio command
22
- * (`{ command, args, env }`) or a remote server (`{ type: "remote", url,
23
- * headers, enabled }`). OpenCode's schema also supports an `enabled: false`
24
- * flag we preserve on write but don't surface in the UI yet.
25
- */
26
- export class OpencodeMcpProvider extends McpProvider {
27
- constructor() {
28
- super('opencode', ['user', 'project'], ['stdio', 'http', 'sse']);
29
- }
30
-
31
- protected async readScopedServers(scope: McpScope, workspacePath: string): Promise<Record<string, unknown>> {
32
- const filePath = scope === 'user'
33
- ? path.join(os.homedir(), '.config', 'opencode', 'opencode.json')
34
- : path.join(workspacePath, 'opencode.json');
35
- const config = await readJsonConfig(filePath);
36
- return readObjectRecord(config.mcp) ?? {};
37
- }
38
-
39
- protected async writeScopedServers(
40
- scope: McpScope,
41
- workspacePath: string,
42
- servers: Record<string, unknown>,
43
- ): Promise<void> {
44
- const filePath = scope === 'user'
45
- ? path.join(os.homedir(), '.config', 'opencode', 'opencode.json')
46
- : path.join(workspacePath, 'opencode.json');
47
- const config = await readJsonConfig(filePath);
48
- config.mcp = servers;
49
- await writeJsonConfig(filePath, config);
50
- }
51
-
52
- protected buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown> {
53
- if (input.transport === 'stdio') {
54
- if (!input.command?.trim()) {
55
- throw new AppError('command is required for stdio MCP servers.', {
56
- code: 'MCP_COMMAND_REQUIRED',
57
- statusCode: 400,
58
- });
59
- }
60
- return {
61
- type: 'local',
62
- command: input.command,
63
- args: input.args ?? [],
64
- env: input.env ?? {},
65
- cwd: input.cwd,
66
- enabled: true,
67
- };
68
- }
69
-
70
- if (!input.url?.trim()) {
71
- throw new AppError('url is required for http/sse MCP servers.', {
72
- code: 'MCP_URL_REQUIRED',
73
- statusCode: 400,
74
- });
75
- }
76
-
77
- return {
78
- type: 'remote',
79
- url: input.url,
80
- headers: input.headers ?? {},
81
- enabled: true,
82
- };
83
- }
84
-
85
- protected normalizeServerConfig(
86
- scope: McpScope,
87
- name: string,
88
- rawConfig: unknown,
89
- ): ProviderMcpServer | null {
90
- if (!rawConfig || typeof rawConfig !== 'object') {
91
- return null;
92
- }
93
-
94
- const config = rawConfig as Record<string, unknown>;
95
- const opencodeType = readOptionalString(config.type);
96
-
97
- // Local (stdio) entries — either type: "local" explicitly or any entry
98
- // with a command field (pre-type schemas).
99
- if (opencodeType === 'local' || typeof config.command === 'string') {
100
- return {
101
- provider: 'opencode',
102
- name,
103
- scope,
104
- transport: 'stdio',
105
- command: typeof config.command === 'string' ? config.command : '',
106
- args: readStringArray(config.args),
107
- env: readStringRecord(config.env),
108
- cwd: readOptionalString(config.cwd),
109
- };
110
- }
111
-
112
- // Remote entries — type: "remote" or any entry with a url field.
113
- if (opencodeType === 'remote' || typeof config.url === 'string') {
114
- return {
115
- provider: 'opencode',
116
- name,
117
- scope,
118
- transport: 'http',
119
- url: typeof config.url === 'string' ? config.url : '',
120
- headers: readStringRecord(config.headers),
121
- };
122
- }
123
-
124
- return null;
125
- }
126
- }
1
+ import os from 'node:os';
2
+ import path from 'node:path';
3
+
4
+ import { McpProvider } from '@/modules/providers/shared/mcp/mcp.provider.js';
5
+ import type { McpScope, ProviderMcpServer, UpsertProviderMcpServerInput } from '@/shared/types.js';
6
+ import {
7
+ AppError,
8
+ readJsonConfig,
9
+ readObjectRecord,
10
+ readOptionalString,
11
+ readStringArray,
12
+ readStringRecord,
13
+ writeJsonConfig,
14
+ } from '@/shared/utils.js';
15
+
16
+ /**
17
+ * OpenCode MCP provider.
18
+ *
19
+ * OpenCode's MCP servers live under the top-level `mcp` key in
20
+ * `opencode.json` (global at `~/.config/opencode/opencode.json`, project at
21
+ * `<workspace>/opencode.json`). Each entry is either a local stdio command
22
+ * (`{ command, args, env }`) or a remote server (`{ type: "remote", url,
23
+ * headers, enabled }`). OpenCode's schema also supports an `enabled: false`
24
+ * flag we preserve on write but don't surface in the UI yet.
25
+ */
26
+ export class OpencodeMcpProvider extends McpProvider {
27
+ constructor() {
28
+ super('opencode', ['user', 'project'], ['stdio', 'http', 'sse']);
29
+ }
30
+
31
+ protected async readScopedServers(scope: McpScope, workspacePath: string): Promise<Record<string, unknown>> {
32
+ const filePath = scope === 'user'
33
+ ? path.join(os.homedir(), '.config', 'opencode', 'opencode.json')
34
+ : path.join(workspacePath, 'opencode.json');
35
+ const config = await readJsonConfig(filePath);
36
+ return readObjectRecord(config.mcp) ?? {};
37
+ }
38
+
39
+ protected async writeScopedServers(
40
+ scope: McpScope,
41
+ workspacePath: string,
42
+ servers: Record<string, unknown>,
43
+ ): Promise<void> {
44
+ const filePath = scope === 'user'
45
+ ? path.join(os.homedir(), '.config', 'opencode', 'opencode.json')
46
+ : path.join(workspacePath, 'opencode.json');
47
+ const config = await readJsonConfig(filePath);
48
+ config.mcp = servers;
49
+ await writeJsonConfig(filePath, config);
50
+ }
51
+
52
+ protected buildServerConfig(input: UpsertProviderMcpServerInput): Record<string, unknown> {
53
+ if (input.transport === 'stdio') {
54
+ if (!input.command?.trim()) {
55
+ throw new AppError('command is required for stdio MCP servers.', {
56
+ code: 'MCP_COMMAND_REQUIRED',
57
+ statusCode: 400,
58
+ });
59
+ }
60
+ return {
61
+ type: 'local',
62
+ command: input.command,
63
+ args: input.args ?? [],
64
+ env: input.env ?? {},
65
+ cwd: input.cwd,
66
+ enabled: true,
67
+ };
68
+ }
69
+
70
+ if (!input.url?.trim()) {
71
+ throw new AppError('url is required for http/sse MCP servers.', {
72
+ code: 'MCP_URL_REQUIRED',
73
+ statusCode: 400,
74
+ });
75
+ }
76
+
77
+ return {
78
+ type: 'remote',
79
+ url: input.url,
80
+ headers: input.headers ?? {},
81
+ enabled: true,
82
+ };
83
+ }
84
+
85
+ protected normalizeServerConfig(
86
+ scope: McpScope,
87
+ name: string,
88
+ rawConfig: unknown,
89
+ ): ProviderMcpServer | null {
90
+ if (!rawConfig || typeof rawConfig !== 'object') {
91
+ return null;
92
+ }
93
+
94
+ const config = rawConfig as Record<string, unknown>;
95
+ const opencodeType = readOptionalString(config.type);
96
+
97
+ // Local (stdio) entries — either type: "local" explicitly or any entry
98
+ // with a command field (pre-type schemas).
99
+ if (opencodeType === 'local' || typeof config.command === 'string') {
100
+ return {
101
+ provider: 'opencode',
102
+ name,
103
+ scope,
104
+ transport: 'stdio',
105
+ command: typeof config.command === 'string' ? config.command : '',
106
+ args: readStringArray(config.args),
107
+ env: readStringRecord(config.env),
108
+ cwd: readOptionalString(config.cwd),
109
+ };
110
+ }
111
+
112
+ // Remote entries — type: "remote" or any entry with a url field.
113
+ if (opencodeType === 'remote' || typeof config.url === 'string') {
114
+ return {
115
+ provider: 'opencode',
116
+ name,
117
+ scope,
118
+ transport: 'http',
119
+ url: typeof config.url === 'string' ? config.url : '',
120
+ headers: readStringRecord(config.headers),
121
+ };
122
+ }
123
+
124
+ return null;
125
+ }
126
+ }